Export Passwords from KeePass for Pleasant

See why customers choose Pleasant Password Server with a KeePass client

It is possible to export a user's set of passwords, by using KeePass for Pleasant Password Client.

Creating a file export can be beneficial for analyzing data, storing data, disaster recovery, reporting and auditing, or manipulating the information in different formats.

Important: When making a copy of these secured vault passwords, ensure that the new file location is properly secured.

Have Questions?  Contact Us!

Export Options

There are numerous methods and formats available for exporting:

• KeePass desktop app (multiple formats)
• Web App (CSV)
• Via API Script (CSV)

KeePass Formats Available:

• CSV, KDB, KDBX, XML, customizable HTML, Transform using XSL, or as Windows Favourites (bookmarks)
• The export can be encrypted and password protected, or plain text, as you choose.
• Not included in the Export/Import files:
  • Security Access
  • Roles
  • File Attachments
  • Plugin data

Export all fields - including custom fields:

The most flexible of the export options may be the KeePass XML file export or the Customizable HTML file export.

• Export All Fields (technical): Currently from the KeePass desktop application the most complete option is to first export using XML, then convert this format to CSV.

Enabling Export

By default the Export functionality is turned off for users, but can be simply re-enabled by users unless this option is restricted (see section: Restrict Password Export).

To re-enable export on the user's desktop:

• Navigate to KeePass for Pleasant > Tools > Options > Policy tab
• Check these options on:
  1. Export * (Allow exporting entries.)
  2. Export - No Key Repeat * (Do not require entering current master key before exporting.)
• * Restart KeePass

If the first option is not enabled you may see:

• KeePass: "This operation is not allowed by the application policy. Ask your administrator to allow this operation. The following policy flag is required: Export - Allow exporting entries."

If the second option is not enabled you may see the following prompt & popup:

• KeePass: "Enter Current Master Key" (window prompt)
• KeePass: "The composite key is invalid! Make sure the composite key is correct and try again." (popup)

Restricting Password Export

The ability to Export passwords / information can be restricted by administrators:

1. By navigating to the KeePass options,
2. Turning off KeePass Export and "Copy Whole Entries", and
3. Assigning this Client Configuration file to be enforced for selected Users or Roles.

Better Alternatives than Exporting Passwords

These related methods are useful ways to manage the storage of your passwords, and are likely more secure/more convenient in many situations:

• VM Snapshots
• Database Replication
• Backup and Restore
• Scripted Automatic Backups
• Caching Passwords Offline
• Export Entries to CSV file via API
• Archive Folder

Password Export Steps

1. Either:
   
   • Export All: Select Export from the File menu
   • Export a Folder: Right-Click on a folder
2. Select a Format type and a filename
3. Click Ok
4. Enter a custom password (version 7.9.6)
5. Click Ok

KeePass File Import Steps

To import this file back into either KeePass for Pleasant Password Server or the regular KeePass (keepass.info):

1. Import the file into KeePass
2. When prompted, enter the custom password (version 7.9.6), or the default password (previous versions):

export_password

How do I change the KDBX file password?

To store your exported passwords in a KDBX file with a password different than the default password mentioned in the section above, then follow these steps:

1. Open KeePass for Pleasant Password Server.
2. Export your entries to a KDBX file.
3. Exit KeePass for Pleasant Password Server (make sure it's completely closed)
4. Open up the regular version of KeePass (download from: https://keepass.info)
5. Create a new database.
6. Open File -> Change Master Key, and set a new password.
7. Import your passwords from the KDBX file you exported earlier.

Export via API

Exporting can be handled nicely using an export script which retrieves the information from the server via the Application Programming Interface (API):

• Export Entries to CSV file via API

Contact Us for an example script or if you have additional questions.

Scheduling Automatic Exports

Exports can be scheduled in combination with a script and a task scheduler. For the purpose of Disaster Recovery this could be helpful, to save this information into another secure location.

We would first recommend using the built-in Backup & Restore. Exporting can potentially consume time or interfere with other user actions.