QTPass Guide

QTPass Guide

• Windows 10 is assumed.
• Yubikey 5 smartcard is assumed.
• Key generation is outside the scope of this article.
• Ctrl-S is responsible for making this, but you can join in if you like.

Installation

Download software - git, gpg, qtpass (Preparation for install)

• git
• gpg
• qtpass

TODO

Install software - git, gpg, qtpass

• git
• gpg
• qtpass

TODO

Install using Chocolatey (package manager):

• Install Chocolatey package manager:

https://chocolatey.org/install

• Install QTPass package:

>choco install qtpass

Configure git

• TODO Git setup

Configure GPG

• TODO Kleopatra setup
• Verify by listing installed keys

>gpg --list-keys

Configure QTPass

• The settings window is opened by clicking on the slider icon at the top of the main window.
• Set path to Git executable

C:/Program Files/Git/bin/git.exe

• Set path to GPG executable

C:/Program Files (x86)/GnuPG/bin/gpg.exe

• Set path to PWGen executable

C:/Program Files (x86)/PWGen/PWGen.exe

TODO: Figure out how to make PWGen work.

• Set key to use, the window to do this is opened by clicking on the person sillouette icon at the top of the main window.
• Create a profile in the settings window "Profiles" tab.
• (If needed) Initialize the git repo at the storage location:

> git init C:\Users\Me\password-store

Testing QTPass

TODO

• Create a test entry in a test folder

TODO

• Read back test entry

TODO

Using a smartcard

• TODO yubikey 5 smartcard

Using QTPass

TODO normal basic usage

• Add new password / credentials
• Read saved password / credentials

• Renaming a password entry

Renaming an entry in the UI can rename the file to what you tell it to rename to, omitting the .gpg extention that is normally present on the file itself.
This can be fixed by going to the password store folder and adding the .gpg file extention

Migration into QTPass

TODO bulk import of credentials

• Pick a consistant naming & organization scheme

First line should be the password itself (Does QTPass do this for the user?)

• Tools for mass-import

TODO

• Manual import

TODO

Resolving specific errors

"could not read encryption key to use, .gpg-id file missing or invalid."

• Tracing error cause:
  • Message originates in either of these two functions:

"void ImitatePass::Insert(QString file, QString newValue, bool overwrite) {"
https://github.com/IJHack/QtPass/blob/8f2b87b36bd74f1c104653bf22150185125c365c/src/imitatepass.cpp#L95

or

"void ImitatePass::reencryptPath(const QString &dir) {"
https://github.com/IJHack/QtPass/blob/8f2b87b36bd74f1c104653bf22150185125c365c/src/imitatepass.cpp#L298

• Resolution:

TODO

"fatal: not a git repository (or any of the parent directories): .git"

• Error message:

"fatal: not a git repository (or any of the parent directories): .git"

• Tracing error cause:

• Resolution: TODO

Manually initializing a git repo in the new password store location fixes this. In folder of password storage: > git init .

"fatal: not a git repository (or any of the parent directories): .git"

• Symptoms:

After enabling the use of PWGen for password creation, attempting to create a password results in PWGen opening with an error message followed by possible crash of QTPass.

• Error message:

PWGen encountered 1 error(s) during startup:
1) Unknown command line switch(es):
"-1"; "--secure"; "--capitalize"; "--numerals".

• Tracing error cause:

PWGen probably changed how it accepts arguments?

• Resolution:

TODO

Handy seeming links

QTPass homepage:

• https://qtpass.org/
• https://github.com/IJHack/QtPass

PWGen-win homepage:

• http://pwgen-win.sourceforge.net/
• https://sourceforge.net/projects/pwgen-win/
• http://pwgen-win.sourceforge.net/downloads.html

Appears to be modern home of Kleopatra / Windows GPG:

• https://gpg4win.org/get-gpg4win.html
• https://gpg4win.org/documentation.html

Appears to be older home of Kleopatra / Windows GPG:

• https://www.openpgp.org/software/kleopatra/
• https://docs.kde.org/stable5/en/pim/kleopatra/index.html

Pass homepage:

• https://www.passwordstore.org/

GoPass:

• https://www.gopass.pw/
• https://github.com/gopasspw/gopass
• https://github.com/gopasspw/gopass/releases

Smartcard-related:

• https://developers.yubico.com/PGP/
• https://developers.yubico.com/PGP/Git_signing.html