Manipulating Database Security with keepassxc-cli?

[kentborg]

Can keepassxc-cli manipulate a database security?

• Change password.
• Add challenge-response.
• Remove challenge-response.

If so, how?

Thanks,

-kb

[droidmonkey]

https://github.com/keepassxreboot/keepassxc/blob/develop/docs%2Fman%2Fkeepassxc-cli.1.adoc#L243

[kentborg]

That is a short answer. I take it to mean it is possible to do those three things.

Thanks,

-kb, the Kent who will do more poking about.

[droidmonkey]

Click the link, read the docs

[kentborg]

kentborg@theseion:~/keepassx-databases/cli-playing$ keepassxc-cli db-create --set-password test.db.kdbx
Enter password to encrypt database (optional): 
Repeat password: 
Successfully created new database.
kentborg@theseion:~/keepassx-databases/cli-playing$ keepassxc-cli db-info  test.db.kdbx 
Enter password to unlock test.db.kdbx: 
UUID: {c2c38b96-1495-420d-870e-39f1ede944d1}
Name: 
Description: 
Cipher: AES 256-bit
KDF: AES (1000000 rounds)
Recycle bin is enabled.
Location: test.db.kdbx
Database created: 3/9/25 6:13 PM
Last saved: 3/9/25 11:13 AM
Unsaved changes: no
Number of groups: 1
Number of entries: 0
Number of expired entries: 0
Unique passwords: 0
Non-unique passwords: 0
Maximum password reuse: 0
Number of short passwords: 0
Number of weak passwords: 0
Entries excluded from reports: 0
Average password length: 0 characters
kentborg@theseion:~/keepassx-databases/cli-playing$ keepassxc-cli db-edit --yubikey 1:27420248 test.db.kdbx 
Enter password to unlock test.db.kdbx: 
Please present or touch your YubiKey to continue.

Error while reading the database: Invalid credentials were provided, please try again.
If this reoccurs, then your database file may be corrupt.
kentborg@theseion:~/keepassx-databases/cli-playing$ 

What am I doing wrong? I am good enough at typing my password to do info.

-kb

[droidmonkey]

We don't support adding yubikey from cli yet

[kentborg]

So the terse RTFM did not mean that is possible.

Thanks,

-kb

[droidmonkey]

Well the manual doesn't say it is 🤪

[cen1]

This would be really nice to have in the CLI. I want to script creating a kdbx with a password and a Yubikey.