KeePassWindowsHello

• Keepass v2.48.1 x86 windows hello plugin.

Technology used:

• Using Windows Hello with new Windows Runtime library (No UWP Desktop Bride needed). Compatibile set to Windows 10, version 2004.
• DPAPI to crypt\encrypt encrypt sensitive data

Compile & Install:

In order to compile you have to use Visual Studio 2019 Comunity Edition.

The binary produced works only with the Keepass version used as reference and present on "ext" folder. The current version is 2.48.1.

You need to compile also KeePass with .NET 4.8 and replace the installed one. This step is required because the Windows Runtime library require at least .NET 4.6 instead KeePass is compiled with .NET 4.0.

To install on Keepass, you have to copy the following files into "KeePass Password Safe 2\Plugins" folder:

• FingerprintPlugin.dll
• Newtonsoft.Json.dll

Use:

The first time open the keepass database with MasterPassword.
Now on Tools Menù is present a new item "Fingerprint".
After you select fingerprint a new window is opened.
Set the MasterPassword on the textbox.
The password is saved locally crypted with DPAPI in AppData\Roaming\KeePassWindowsHelloPlugin\DbMasterKey.dat.

Now when you open Keepass you have to deselect MasterPassword checkbox and select "Key File" with "Fingerprint Key Provider" as provider.

Portable

Here there is my test environment. As I mention before, the exe file is the recompiled version of 2.48.1 without signing.

https://1drv.ms/u/s!Ajk6HSaqH4NngdkTmo057tOd6fqTeg?e=NWTyBs