---
type: entity
title: KeePassXC
tags: [software, password-manager, security, totp, open-source, floss]
related: [matrix-recovery-key, 2-factor-authentication, totp, zentrale-datenspeicherung, concepts/floss]
created: 2026-06-30
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_dienste_allgemein_instant_messaging_chat_matrix_sicherheits.md", "output/rz_uni_greifswald_de_support_dokumentation_anleitungen_2fa_mit_totp_zweitgeraet_.md", "output/rz_uni_greifswald_de_support_dokumentation_floss.md"]
---

# KeePassXC

**KeePassXC** is a cross-platform, open-source, community-driven password manager. It is recommended by the [[universitatsrechenzentrum-urz]] (URZ) for the secure and encrypted storage and management of passwords, credentials, and security keys.

## Use Cases at Universität Greifswald

### Secure Credential Storage
The [[universitatsrechenzentrum-urz]] recommends KeePassXC as a suitable and secure storage location for critical security credentials, such as the [[matrix-recovery-key]].

### Role in University 2FA
KeePassXC is the recommended tool for implementing **secondary device redundancy** for [[2-factor-authentication]]. It allows users to generate [[totp]] codes on a PC or Notebook, serving as a backup to a primary smartphone.

#### Configuration for URZ 2FA
To use KeePassXC for university 2FA, users must:
1. Create a secure database.
2. Create a new entry (e.g., "2FA Universität Greifswald").
3. Configure the TOTP settings by pasting the **TOTP Secret** retrieved from the [[ums]].

## Security and Storage Recommendations

### Clipboard Security
The URZ recommends configuring KeePassXC to clear the clipboard after **30 seconds** to protect sensitive secrets.

### Database Storage
For users working exclusively within the university network, storing the database on the central file server (H: drive) is recommended to ensure automatic redundancy via [[zentrale-datenspeicherung]].