Appearance
How to use YubiKey in AutoFill
This article describes how to use YubiKey-protected database in Password AutoFill.
AutoFill has several restrictions imposed by the system, so YubiKey support depends on how your device communicates with your YubiKey. Refer to YubiKey compatibility chart to check whether your YubiKey works in AutoFill.
YubiKeys with a Lightning connector are fully supported in AutoFill, so you can use your database just like in the main KeePassium app. For other YubiKey models, you can use the workaround described below.
Workaround
It is possible to open a YubiKey-protected database in AutoFill, even if AutoFill cannot communicate with the YubiKey. The workaround uses the main app to communicate with the YubiKey and calculate the database decryption key, and then passes that key to AutoFill.
- Open KeePassium settings → Data Protection
- Turn on the Remember Master Keys option
- Make sure that Database Timeout is something longer than "Immediately"
- Turn on the Cache Derived Encryption Keys option
- Unlock your database in KeePassium app. KeePassium will remember the decryption key of the database.
- Switch to AutoFill. It will open your database using the remembered key, without asking for YubiKey.
INFO
Once your database is edited on any other device, the decryption key would change. Simply unlock your database in the main KeePassium app again; this will update the decryption key for the AutoFill.