If you checked Require touch in step 5, you will be prompted to touch your YubiKey (its LED should also flash on and off steadily).(Note: If you see the error 'secret does not match yubikey,' this option hasn't been selected.) Paste the secret key generated in step 5 into the window, check Variable Length Challenge?, and click OK.Click OK, and you should see a Secret Key Entry window appear.Enter your master password, check Show expert options, check Key file / provider, and select Yubikey challenge-response from the list. You should see the Create Composite Master Key window.If you are creating a new database, initiate the process, then select your name and save location (you will be prompted to do this). If you already have an existing database, open it, then click File > Change Master Key.

Run KeePass, or restart it if it was already running. zip file into the KeePass installation folder. KeeChallenge is installed by copying the contents of the. Install KeePass and KeeChallenge, if you have not already done so.Generate a secret key by clicking Generate, and copy it somewhere (this will be needed later for KeePass setup).Select Challenge-response and click Next.Since KeeChallenge only supports use of configuration slot 2 (this slot comes empty from the factory), click Configure under the Long Touch (Slot 2).Install YubiKey Manager, if you have not already done so, and launch the program.KeeChallenge, the KeePass plugin that adds support for Challenge-Response.KeePass version 2 (version should be 2.xx).

A YubiKey with configuration slot 2 available.

HMAC-SHA1 Challenge-Response (recommended) Requirements HMAC-SHA1 is recommended over OATH-HOTP because of its ease-of-use, as well as its ability to be backed up (it is not possible to have a backup YubiKey when OATH-HOTP is used). This article covers two methods for using YubiKeys with the KeePass password manager: HMAC-SHA1 Challenge-Response and OATH-HOTP.

Keepass xc yubikey