Originally published at: Password managers for Nextcloud – Nextcloud

1. 1password Nextcloud Install
2. 1password Nextcloud Browser
3. 1password Nextcloud App
4. 1password Nextcloud Extension

Password managers for Nextcloud

Recently some of our users pointed us to password manager Enpass, which recently added Nextcloud support to their choice of cloud hosting solutions. As some of our users are probably aware, for the popular Keepass password manager there is an integration app named Keeweb and Nextcloud also features two native password managers: Passwords and Passman. The tweet provided a trigger – so here’s a quick overview of what is available right now for Nextcloud. If things are missing, let me know in the comments and I’ll update the blog!

Also note that if YOU want to write a blog like this about another subject, say, different mail clients, note taking options, music players, you name it – we’d be very happy to post it here!

Keepass

Keepass is an open source password safe with a long feature list:

Aug 24, 2017 Can anybody recommend a cross platform Password Manager where I can sync password vaults? I’ve been a 1Password user for years, syncing Vaults via Dropbox. I’ve just finished moving everything off Dropbox, the only remaining data are those password vaultsarguably the most important. They only support Dropbox/iCloud. I’m pretty much entirely invested in the Apple ecosystem, so it has.

• Multiple User Keys
• Portable and No Installation Required, Accessibility
• Export To TXT, HTML, XML and CSV Files
• Import From Many File Formats
• Easy Database Transfer
• Support of Password Groups
• Time Fields and Entry Attachments
• Auto-Type, Global Auto-Type Hot Key and Drag&Drop
• Intuitive and Secure Clipboard Handling
• Searching and Sorting
• Multi-Language Support
• Strong Random Password Generator
• Plugin Architecture

There is a large number of extensions available, as well as a series of apps for Android, iOS, Windows, Linux, Mac and so on. A variety of browser plugins is available as well. The chrome integration seems to be read-only, while for Firefox passwords can be generated as well. Keepass is a bit cumbersome to use, but has a wide range of features and integrations available.

• Nextcloud is a suite of client-server software for creating and using file hosting services. Nextcloud application functionally is similar to Dropbox. Unlike Dropbox, Nextcloud does not offer off-premises file storage hosting. Nextcloud is free and open-source, which means that anyone is allowed to install and operate it on their own private.
• The reason is that NextCloud is located in “/snap/nextcloud” Unfortunately the occ file is not located in /snap/nextcloud/current/ However, you can run the nextcloud.occ command directly without specifying the path. Change admin to your user. Sudo nextcloud.occ user:resetpassword admin. Type in the new password twice and login.

Enpass

Enpass is an offline password manager where users can keep and sync their data using their trusted cloud accounts which they feel are more secure and safe (with 2FA enabled on them). It offers all the key features as compared to other password managers available in market. The desktop version (windows, mac and Linux) is very easy to use. It is free though it requires registration to be unlocked. The iOS and Android apps also have a great user interface but cost money beyond 25 managed passwords.

Enpass can store its passwords on various clouds, like iCloud, Google Drive, OneDrive, Dropbox, Box and any WebDAV based one. And, of course, Nextcloud!

A quick feature list:

• Password generator & auditor
• Can generate OTP codes
• Multiple vaults
• Secure password sharing
• Can securily store documents
• Can fill in forms
• Import and export capabilities

Enpass is easy to use and the ability to fill in forms, store documents and generate OTP codes make it kind of a one-for-all tool.

The screenshot comes from a review on Lifewire!

Passman

Passman is the oldest Nextcloud password manager. It is quite featurefull and has had contributions from 26 people, though lately things seem to be quiet on github. Still, it works with Nextcloud 18, the last release was just in October and the ability to share passwords is very cool! Sadly, there is no iOS app at the moment, a discontinued project exists if somebody wants to pick this up.

• Multiple accounts
• Multiple vaults
• Vault key is never sent to the server
• Credentials are stored with 256 bit AES
• Ability to add custom fields to credentials
• Built-in OTP(One Time Password) generator
• Password analyzer
• Share passwords internally and via link in a secure manner
• Import from various password managers:
  • KeePass
  • LastPass
  • DashLane
  • ZOHO
  • Clipperz.is

The app has:

1password Nextcloud Install

• 26 contributors, 2 quite active
• ~2K Chrome & Firefox users
• 5K+ Android app users
• Brand new iOS app

Passwords

Passwords is also a native Nextcloud app, getting updated regularly and with active chat and forums. Its feature list is a bit shorter than Passman and includes:

• password security monitor
• Secure encryption
• Folders & tags
• Sharing
• API for apps
• Extensive handbook
• Import & Export
• Browser extensions

There is a well maintained Android app, iOS integration is sadly still missing. The app is currently a bit more basic than the others, not offering groups and folders for example. But this is on the roadmap! The app is not in the Nextcloud repo, though, and mostly relies on a single developer with a total of 6 contributors, plus one (different) person doing the Android app. The app has:

• 6 contributors + 1 android
• ~ 3K users on each Chrome and Firefox
• 5K+ Android app users
• app installations unclear

The import can be found under More > Backup and Restore > Restore or Import.It can be used to restore a previously made backup, import a backup from another instance or import data from another password manager.

The Import Steps

1. Choose Format

Choose the format of the file you want to import.If you want to import a CSV file from an application which is not listed, choose Custom CSV.

2. Select File

Select the file you want to import.If you want to import a custom csv file, make sure to set the csv options before you open the file.

3. Select Options

Select the options for the import.Depending on the file type, different options may be available which are explained below.

4. Run Import

If you're ready to go, hit the Import button and start importing your files

Specific importers

Most of the imports for files from a third party service are just a profile with preselected options for the CSV import.There are some imports which do have special options just for that service.The description of these options dav be found in the import guide for that service.

Import Options

Conflict Handling Mode

The Conflict handling mode defines how the Importer should handle conflicts.Skip if same revision will skip an entry if it already exists and the revision matches. Works only if the import contains a revision field.Skip always will skip an entry if it already exists in the database.Overwrite existing will overwrite an entry if it already exists in the database.Merge with existing will merge the new data with the current data. This does not apply for custom fields.Create new entry will always create a new entry, even if it already exists.

Note: If no id field is available, entries will be matched by their name. The Database Backup option will always use id based matching.

Don't edit passwords shared with me

If this option is selected, passwords which were shared with you by other users will not be overwritten by the import.

Troubleshooting

How to fix faulty CSV files

Some password managers create faulty export files which can not be parsed by the importer.These files need to be fixed manually in order to work properly.

1. Open the file in a spreadsheet program like LibreOffice Calc or Microsoft Excel.
2. Check the file for errors. Most of these programs do a good job in fixing faulty CSVs. You should make sure that all colums are filled in properly.
3. Export the file as CSV.
4. Try the Import again

Example errors

Files can not be imported

Some password managers (e.g. Passman, Enpass, Bitwarden) allow files to be stored with passwords.The Import will show the warning 'Password Name' has files attached which can not be imported. for each password which has files attached.The password will be imported anyway but the files will not be imported.Passwords does not offer any file storage functionality as we believe that it is better to leave this to Nextcloud itself.

Passwords does support the linking of files stored in Nextcloud to passwords.Therefore we recommend downloading the files manually from your old Password manager and storing them in Nextcloud.After this you can edit the password and add a custom field with the type 'file' and choose the file from the file dialog.

Note: If you want to store secret files like private keys, we recommend that you use the Nextcloud E2E Encryption.

Long custom field names / values are truncated

1password Nextcloud Browser

If you have custom fields with a label that exceeds 48 characters or a value that exceeds 320 characters, it will be truncated to fit the length limitations of Passwords.Custom fields are intended to contain usual password related information like and e-mail address or the like.They are not intended to hold large amounts of data.If you want to store long texts, we recommend to use the 'Notes' field.

1password Nextcloud App

Custom field type mismatch

1password Nextcloud Extension

If you import passwords with custom fields from any source other than the Database Backup, they will be validated.Fields with the type url or email will require to be in a correct format or their type will be set to text.Also all fields with the type text will be checked if they are in the right format for url or email and if so, their type will be changed.