Talk:KeePass

Transferring secrets to and from providers

When migrating from a secrets provider to another, you will obviously want to transfer the secrets.

I've found a method, but 1) it's perfectible, and 2) where should it be documented?

What I've used is:

1. Use lssecret to extract all secrets,
2. systemctl --user stop gnome-keyring.service,
3. Start KeePassXC's Secret Service integration,
4. Use an ad-hoc script to parse its output into secret-tool store invocations.

...this is problematic because KeePassXC (at least) adds a lot of (perhaps harmless) key/value pairs, and also lssecret is not able to extract from locked collections. (secret-tool is, but it doesn't have ls-like capabilities. Augh!)

ISSOtm (talk) 18:57, 17 September 2023 (UTC)