Plugins (1.x) Installation, uninstallation and security of KeePass 1.x plugins.

• Introduction
• Online Resources
• Installation and Uninstallation
• Security

Introduction

KeePass features a plugin framework. Plugins can provide additional functionality, like support of more file formats for import/export, network functionalities, backup features, etc.

Online Resources

Plugins can be found on the Plugins page.

Installation and Uninstallation

If there are no explicit instructions how to install the plugin, follow these steps:

1. Download the plugin from the page above and unpack the ZIP file to a new folder.
2. In KeePass, click 'Tools' → 'Plugins' → button 'Open Folder'; KeePass now opens a folder called 'Plugins'. Move the new folder (containing the plugin files) into the 'Plugins' folder.
3. Restart KeePass in order to load the new plugin.

To uninstall a plugin, delete the plugin files.

Security

Plugins must be stored in the 'Plugins' folder of the KeePass application directory. An attacker who can copy a malicious plugin into this folder could typically also replace the 'KeePass.exe' file by malware. As protection against such attacks, an appropriate file system access control list (ACL) should be used (for the whole KeePass application directory, including the 'Plugins' folder); administrator privileges should be required for write access.

• The KeePass installer and the MSI package install KeePass into the Program Files directory by default. This directory typically has an appropriate ACL, and the KeePass application directory inherits this ACL. So, you do not need to specify an ACL manually.
• If you installed KeePass to a different directory or if you use the portable package, it is recommended that you specify an appropriate ACL manually.