QTPass Guide

QTPass Guide

• Windows 10 is assumed.
• Yubikey 5 smartcard is assumed.
• Key generation is outside the scope of this article.
• Ctrl-S is responsible for making this, but you can join in if you like.

Installation

Download software - git, gpg, qtpass (Preparation for install)

• git
• gpg
• qtpass

TODO

Install software - git, gpg, qtpass

• git
• gpg
• qtpass

TODO

Install using Chocolatey (package manager):

• Install Chocolatey package manager:

https://chocolatey.org/install

• Install QTPass package:

>choco install qtpass

Configure git

• TODO Git setup

Configure GPG

• TODO Kleopatra setup
• Verify by listing installed keys

>gpg --list-keys

Configure QTPass

• The settings window is opened by clicking on the slider icon at the top of the main window.
• Set path to Git executable

C:/Program Files/Git/bin/git.exe

• Set path to GPG executable

C:/Program Files (x86)/GnuPG/bin/gpg.exe

• Set path to PWGen executable

C:/Program Files (x86)/PWGen/PWGen.exe

TODO: Figure out how to make PWGen work.

• Set key to use, the window to do this is opened by clicking on the person sillouette icon at the top of the main window.
• Create a profile in the settings window "Profiles" tab.
• (If needed) Initialize the git repo at the storage location:

> git init C:\Users\Me\password-store

Testing QTPass

TODO

• Create a test entry in a test folder

TODO

• Read back test entry

TODO

Using a smartcard

• TODO yubikey 5 smartcard

Using QTPass

TODO normal basic usage

• Add new password / credentials
• Read saved password / credentials

Migration into QTPass

TODO bulk import of credentials

• Pick a consistant naming & organization scheme

First line should be the password itself (Does QTPass do this for the user?)

• Tools for mass-import

TODO

• Manual import

TODO

Resolving specific errors

"could not read encryption key to use, .gpg-id file missing or invalid."

• Tracing error cause:
  • Message originates in either of these two functions:

"void ImitatePass::Insert(QString file, QString newValue, bool overwrite) {"
https://github.com/IJHack/QtPass/blob/8f2b87b36bd74f1c104653bf22150185125c365c/src/imitatepass.cpp#L95

or

"void ImitatePass::reencryptPath(const QString &dir) {"
https://github.com/IJHack/QtPass/blob/8f2b87b36bd74f1c104653bf22150185125c365c/src/imitatepass.cpp#L298

• Resolution:

TODO

"fatal: not a git repository (or any of the parent directories): .git"

• Error message:

"fatal: not a git repository (or any of the parent directories): .git"

• Tracing error cause:

• Resolution: TODO

Manually initializing a git repo in the new password store location fixes this. In folder of password storage: > git init .

"fatal: not a git repository (or any of the parent directories): .git"

• Symptoms:

After enabling the use of PWGen for password creation, attempting to create a password results in PWGen opening with an error message followed by possible crash of QTPass.

• Error message:

PWGen encountered 1 error(s) during startup:
1) Unknown command line switch(es):
"-1"; "--secure"; "--capitalize"; "--numerals".

• Tracing error cause:

PWGen probably changed how it accepts arguments?

• Resolution:

TODO

Handy seeming links

QTPass homepage:

• https://qtpass.org/
• https://github.com/IJHack/QtPass

PWGen-win homepage:

• http://pwgen-win.sourceforge.net/
• https://sourceforge.net/projects/pwgen-win/
• http://pwgen-win.sourceforge.net/downloads.html

Appears to be modern home of Kleopatra / Windows GPG:

• https://gpg4win.org/get-gpg4win.html
• https://gpg4win.org/documentation.html

Appears to be older home of Kleopatra / Windows GPG:

• https://www.openpgp.org/software/kleopatra/
• https://docs.kde.org/stable5/en/pim/kleopatra/index.html

Pass homepage:

• https://www.passwordstore.org/

GoPass:

• https://www.gopass.pw/
• https://github.com/gopasspw/gopass
• https://github.com/gopasspw/gopass/releases

Smartcard-related:

• https://developers.yubico.com/PGP/
• https://developers.yubico.com/PGP/Git_signing.html