var searchData = [
{
  "filename": "Welcome/index.html",
  "title": "Welcome",
  "text": " Password Safe How many passwords and user names do you have to keep track of? Whether the answer is one or hundreds, Password Safe allows you to safely and easily create a secured and encrypted master password list. A single Master Password unlocks them all for your use. Security starts with the user. Keeping written lists of passwords on scraps of paper, or in a text document on your desktop is unsafe and is easily viewed by prying eyes (both cyber-based and human). Using the same password over and over again across a wide spectrum of systems and web sites creates the nightmare scenario where once someone has figured out one password, they have figured out all your passwords and now have access to every part of your life (system, e-mail, retail, financial, work). Password Safe allows you to manage your old passwords and to easily and quickly generate, store, organize, retrieve, and use complex new passwords, using password policies that you control. Once stored, your user names and passwords are just a few clicks away. Using Password Safe you can organize your passwords using your own customizable references\u0026mdash;for example, by user ID, category, web site, or location. You can choose to store all your passwords in a single encrypted master password list (an encrypted password database), or use multiple databases to further organize your passwords (work and home, for example). And with its intuitive interface you will be up and running in minutes. "
},
{
  "filename": "About_Password_Safe/index.html",
  "title": "About Password Safe",
  "text": " About Password Safe Password Safe and the Twofish encryption algorithm it uses were originally developed and released to the public by Bruce Schneier and Counterpane Labs. Password Safe is now an open source project hosted at GitHub and SourceForge. The latest program updates, documentation, and news can be located at http://pwsafe.org. Password Safe is freely available and distributable under the restrictions set forth in the standard Open Source Initiative (OSI) \u0022Artistic License 2.0.\u0022 A copy of this license is included with the Password Safe installation package in the file named LICENSE. Twofish is a fast, free alternative to the AES, DES and IDEA encryption algorithms. Details on the Twofish algorithm, including speed comparisons and an extensive list of products that use Twofish, are available at https://www.schneier.com/twofish.html. Please read the Readme.md, Changelog.txt, and ReleaseNotes.md files in the installation package for the latest changes, bug fixes, and documentation addenda. All other brand or product names are trademarks of their respective companies. No support or endorsement by these companies exists or is implied. "
},
{
  "filename": "Password_Safe_and_YubiKey/index.html",
  "title": "Password Safe and YubiKey",
  "text": " Password Safe and YubiKey YubiKey is an innovative hardware authentication device developed and sold by Yubico. To the user, it looks like a small, thin, disk-on-key with a button on top. To Password Safe, it functions as an authentication token, providing strong physical security to the password database. Getting YubiKey Obviously, you need a YubiKey device to start. YubiKeys can be purchased online from here. Note that Password Safe requires YubiKeys with firmware version 2.2 and above. Configuring your YubiKey Your YubiKey needs to be configured properly in order to work with Password Safe. This is done via the Manage-\u003EYubikey... dialog box as described in the Manage Menu Section. If you already have a YubiKey, note that Password Safe uses slot #2 for authentication, leaving slot #1 for other applications. Using YubiKey Once your YubiKey is configured, you can use it, along with you master passphrase, to protect your Password Safe database, as described in Creating a New Safe. "
},
{
  "filename": "Getting_Started/index.html",
  "title": "Getting Started",
  "text": "Getting Started "
},
{
  "filename": "Getting_Started/Creating_and_Opening_a_Safe/index.html",
  "title": "Creating and Opening a Safe",
  "text": " Creating and Opening a Safe Password Safe allows users to store all passwords in a single \u0022safe\u0022 (password database), or to create multiple databases for different purposes (e.g., one for work, one for personal use). Each database is independent and can be moved and used on different systems, as long as the same version of Password Safe is installed. Databases are encrypted with an encryption key derived from the master password (the master password, however, is not kept in the database in any form). If you are using Password Safe for the first time, press the \u0022New...\u0022 button. You will be asked to choose the name and location of your password database. By default, the name will be \u0022pwsafe.psafe3\u0022, and the location will be in \u0022My Safes\u0022 under your Documents folder, for Windows, in .config/pwsafe under your home directory for Linux, and in .pwsafe under your home directory for MacOS. You can change the name and location if you wish, but we recommend that you choose a name and location that will be easy to remember and access. Afterwards, you will be prompted to enter a master password that is used to encrypt and lock the contents of your new safe. Before You Begin Password Safe works very hard to make sure you password information is saved properly. However, Password Safe cannot protect against physical damage or loss to your hard disk, laptop or PC. Therefore, we strongly recommend that you make regular copies of your password database \u0027off-line\u0027, that is, to another PC or disk. This can be done manually, or by using a cloud storage service such as DropBox, SugarSync or JungleDisk, to name a few. Another thing you might want to consider is arranging for access to your password database by relatives or co-workers if you are no longer able to do so. Password Safe has no \u0027back door\u0027 or \u0027recovery password\u0027 mechanism by design. This means that you are responsible for making the master key available to others under the appropriate circumstances. This can be as simple as a sealed envelope in a drawer or safe-deposit box, or a more elaborate mechanism such as splitting the master password and giving different parts to different parties. Create a New Database There are two ways that a new database can be created. By clicking New... from the Master Password Entry dialog when the program is started, or from the \u0022File \u003E New...\u0022 menu once Password Safe has been opened. Using either method causes the Master Password Set Up dialog to appear. Note: By default, Password Safe will show the database last used, and displays a master password prompt for it. If you use several databases, they will appear in the drop-down list. Alternately, you can type in the path to the database to open, or select it from a File dialog box by pressing on the ellipsis (\u0022...\u0022) button. Once a database is open, you can change to another via the Open... command from the File Menu. On checking the \u0022Show Master Password\u0022 box, the contents of old and new master passwords will be visible in clear and the confirmation edit box is disabled as no longer necessary. A strength meter underneath the New Master Password field gives a rough indication of the strength of the password. Red indicates a weak password, Yellow a medium-strength one, and Green indicates a strong password. Your master password should be strong, that is, the bar should be full and green. Using YubiKey with PasswordSafe Password Safe can work with a YubiKey device to provide \u0022two factor authentication\u0022, that is, protecting your database by both something you know (your master passphrase), and something you have (the YubiKey device). If you do not have a YubiKey device, then the YubiKey-specific buttons and texts will not be displayed by Password Safe, and the YubiKey-specific instructions below do not apply. If your YubiKey is connected to your PC, then a \u0022Yubikey\u0022 button and text area will appear in the Master Password Entry and Setup windows, as show above. This allows you to use your YubiKey to access your Password Safe database, either in addition to, or instead of a master password. For maximum security, we recommend that your database be protected both by your YubiKey and a master password (this is known as two-factor authentication). Setting up a Master Password with YubiKey To use your configured YubiKey to protect your database: If you haven\u0027t already done so, insert your YubiKey into a USB slot on your PC. The Yubikey button on the Master Password window will now become active, and the text to the right of will change to \u0022Click, then activate your YubiKey\u0022. Set up the Master Password as follows: If you wish to protect your database using both your YubiKey and a master password (\u0022two factor authentication\u0022), then first enter the master password in the \u0022Master Password\u0022 and \u0022Confirmation\u0022 fields, then click on the Yubikey button. If you wish to protect your database using your YubiKey only, then leave the \u0022Master Password\u0022 and \u0022Confirmation\u0022 fields empty, and click on the Yubikey button. Of course, you can also choose to protect the database by a master password alone, just enter the master password in the \u0022Master Password\u0022 and \u0022Confirmation\u0022 fields and then click on OK. Click on the Yubikey button. The \u0022Click, then activate your YubiKey\u0022 will be replaced by a progress bar indicating the remaining time you have to activate your YubiKey (by touching the flashing green light on the device). If you do not activate your YubiKey in the allotted time (about 15 seconds), then an error message will be displayed, and you can try again or cancel. Once the YubiKey has been activated, your Password Safe database will be created. Opening a database with YubiKey To open a Password Safe database protected with your Yubikey: Make sure the desired database is selected in the \u0022Password Database\u0022 field. If it\u0027s not there, click on the ellipsis (...) and choose it. If you\u0027ve chosen to protect your database using both your YubiKey and a master password, first enter the master password in the \u0022Master Password\u0022 field, then click on the Yubikey button. If you\u0027ve chosen to protect your database using your YubiKey only, then leave the \u0022Master Password\u0022 field empty, and click on the Yubikey button. When you click on the Yubikey button, the \u0022Click, then activate your YubiKey\u0022 will be replaced by a progress bar indicating the remaining time you have to activate your YubiKey (by touching the flashing green light on the device). If you do not activate your YubiKey in the allotted time (about 15 seconds), then an error message will be displayed, and you can try again or cancel. Once the YubiKey has been activated, your Password Safe database will be opened. Screen Capture Protection The small green icon in the lower right corner of the opening window indicates that this window will not appear in screen captures. This is a security measure, added in version 3.64. For more information about this, see the security tab page. Virtual keyboard To setup a master password in a secure way, you could use accented characters (e.g. on a German keyboard) such as \u00FC, \u00DF or similar. To realize the input of such characters, you would need a foreign keyboard. Such a keyboard is available as a virtual keyboard. This keyboard is then used to simulate all available foreign characters. The virtual keyboard can be shown by clicking on the symbol. Foreign characters, that are not available at the physical keyboard, can be put in in this way. So you can build your desired master password. Even pieces of the master password can be built this way. "
},
{
  "filename": "Getting_Started/Using_Stored_Passwords/index.html",
  "title": "Using Stored Passwords",
  "text": " Using Stored Passwords Password Safe provides several mechanisms for using stored names and passwords. Most require copying the user name or password to the clipboard and then pasting the information into the required input field. Password Safe provides a function, AutoType, that automates the entering of a user name and password into a web form. Open Password Safe Select the user name/password entry you wish to use User Name: Select the user name icon from the tool baror Right-click and select Copy username to clipboardor Use Ctrl \u002B Uand then Paste the user name into the desired field. Password: Select the password icon from the tool baror Right-click and select Copy password to clipboardor Double-click the selected entryor Use Ctrl \u002B Cand then Paste the password into the desired field. Note: User names and passwords can also be copied to clipboard through the choices located in the Edit menu, but let\u0027s be honest, that\u0027s far too much clicking. "
},
{
  "filename": "Getting_Started/Searching_for_an_entry/index.html",
  "title": "Searching for an entry",
  "text": " Searching for a given text Password Safe allows you to search for entries with a given text. This is useful if you don\u0027t recall the name of an entry, but have a good idea regarding the contents, e.g., the entry with \u0022Mary\u0022 in the Notes. To search an open Safe, press Ctrl-F (or \u0022Edit \u2192 Find...\u0022). A toolbar appears above the status bar at the bottom of the application\u0027s window similar to the following: The simplest way to use this is to just enter the text you\u0027re looking for, and then press Enter or click on the magnifying glass icon to the right of the text field. The number of matching entries (if any) will be displayed in the right side of the toolbar, and the first matching entry will be selected and emphasized. Pressing Enter (or clicking on the magnifying glass) repeatedly will move to the next matching entry. When all entries have been selected, Password Safe will cycle back to the first. The F3 key performs the repeat find. Just keep pressing F3 to cycle to the next entry that satisfies your criteria. Holding the Shift key down when pressing F3, finds the previous entry in the database matching your criteria rather than the next. You can also hold down the Shift key when clicking on the magnifying glass icon to find the previous match. To close the Find toolbar, click on the \u0027x\u0027 to the left of the text. By default, the search is case insensitive. To toggle between case-sensitive and case-insensitive search, press on the \u0027AA\u0027 button, which changes to \u0027Aa\u0027 when the search is case-sensitive. To perform a more advance search, such as restricting the search to a subset of entries, determine which fields to search, etc., click on the \u0022...\u0022 icon. To create a report about your searching results, press the symbol. To clear the search text, click on the eraser button. "
},
{
  "filename": "Getting_Started/Upgrading_from_previous_versions/index.html",
  "title": "Upgrading from previous versions",
  "text": " Upgrading From Previous Versions of Password Safe In order to support new features and enhance security, the database format which is used to store entries and preferences has been changed between major versions. However, much effort has been put into ensuring automatic and transparent upgrading: Version 1.x of Password Safe can only read databases generated by versions 1.x. Version 2.x of Password Safe can read databases created by itself, and by version 1.x of Password Safe Version 3.x of Password Safe can read databases created by all previous versions. In all cases, to read a database generated by a previous version of Password Safe, just open it as you would any database. The entries will be displayed normally, with possible \u0022unknown\u0022 values in fields that were unsupported in previous versions (e.g., the creation date of an entry). When you save such a database, you will be alerted to the fact that the new database will be unreadable by previous version of Password Safe. Generating previous versions of the database You can create versions of the database that are readable by older versions of Password Safe by explicitly exporting to the desired format (File \u2192 Export To and select V1 format... or V2 format...). Note that the exported databases will not contain information that was added in newer versions. For example, a version 2 database will not have information regarding the modification times of entries. "
},
{
  "filename": "Using_Password_Safe/index.html",
  "title": "Using Password Safe",
  "text": "Using Password Safe "
},
{
  "filename": "Using_Password_Safe/A_Word_about_Master_Passwords/index.html",
  "title": "A Word about Master Passwords",
  "text": " A Word About Master Passwords One of the most important keys to maintaining your security is selecting a strong master password for your Password Safe database. The database (\u0022Safe\u0022) contains all your user names, passwords, and any additional information you may have added. Picking a spouse\u0027s name, a birthday, or some other easily guessable combination leaves your data vulnerable. It is important that you pick a hard-to-guess master password that you can easily remember. Password Safe has a built in check for what it considers to be weak master passwords. In general, a master password (like any password) should consist of mixed case characters with at least one number or special character (such as those found above the number keys on a keyboard). If a master password is entered that the program considers weak, it will prompt for confirmation. You may choose the option to accept the originally entered (weak) password, or to enter a new one. To change your master password, please see Changing Master Passwords. Note: There is no mechanism within Password Safe to retrieve lost or forgotten safe passwords. This is a deliberate design decision, since any mechanism for retrieving lost passwords poses a security hole that can be exploited. "
},
{
  "filename": "Using_Password_Safe/User_Names__Passwords__and_Groups/index.html",
  "title": "User Names, Passwords, and Groups",
  "text": "User Names, Passwords, and Groups "
},
{
  "filename": "Using_Password_Safe/User_Names__Passwords__and_Groups/Basic/index.html",
  "title": "Basic",
  "text": " User Names, Passwords, and Groups: Basic Username, passwords and groups together with the additional parameters are managed in 5 tabs: Basic: all necessary elements for password management Additional: additional specifications, including history Dates and Times: expiry and statistics Attachment: an optional attachment Password Policy: specific differences to the default Most labels in the Basic and Additional Property Pages are Smart Labels. This means that when you click on them, the current contents of the relevant field are copied to the clipboard. The label will flash green to show that the data has been copied. The current smart labels are: Basic Group Title Username Password URL Email Notes Custom Fields Additional AutoType Run Command Note: By pressing the Ctrl key down whilst clicking on the AutoType and Run Command labels, variables will not be substituted in the strings before copying to the clipboard. Basic Tab This tab has the most important and commonly used elements. The following bits of information are associated with each password entry: Group: A name for grouping (organizing) several related entries Title: A friendly name for a password entry User name: The user name Password: The password, with a password strength meter beneath it URL: The URL (website) associated with this entry Email: An email address associated with this entry Notes: Free-form general notes Custom Fields: User-defined named values that can be added to the entry as needed. Only the Title and Password fields are required; all others are optional. Clicking on the button will copy the password to the clipboard. A grey Authentication Code button () indicates that no Authentication Secret has been set for this entry (see Additional Tab). When an Authentication Secret is set, the button is enabled and animated, and the current Authentication Code may be displayed by clicking on the window that appears to the right of the button: Clicking on the animated Authenticated Code button () will copy the current Authentication Code (6 digit value) to the clipboard. The value changes every 30 seconds, and the clipboard will be updated accordingly until either the database is locked or something else is placed on the clipboard. The Notes field is intended for short texts, and is limited to 30,000 characters. Whilst it is possible to add more than this limit when the entry is added, warnings will be issued when the database is re-opened. The Notes field will be truncated to this limit if the entry is edited. However, if the entry is protected or the database is opened in read-only mode, then it can be viewed without any truncation. The Notes field contents may be edited using an external editor by right-clicking on the field. Note however, that the contents will saved temporarily on disk in clear text. In addition, some external editors will use an existing instance to edit the temporary text file and this will cause Password Safe to immediately return leaving the data unchanged even though the temporary text file is still available in the external editor. If the external editor supports it, it is possible to specify command line parameters to force a new instance for editing the Notes field to prevent this (for example: \u0022-multiInst\u0022 for the Notepad\u002B\u002B editor). See \u0022Manage \u2192 Options \u2192 Misc.\u0022. If you do specify command line parameters, do not enclose them in quotes unless your chosen external editor requires them. The value you specify will be used as-is with no changes. Custom Fields is where you can add your own named fields to each password entry. For each custom field, you can specify a name and a value, as well as specifying if the value will be displayed or displayed as \u0022******\u0022 (masked). There\u0027s no limit on the number of custom fields you can add, but each field name must be unique for the entry, and cannot be empty. In addition, the following fields may be set in this tab: URL: The URL associated with the entry. If this field is not empty, then the \u0022Go\u0022 button is enabled. If the protocol is not specified, then \u0022http://\u0022 is assumed (e.g., \u0022www.foo.net\u0022 is the same as \u0022http://www.foo.net\u0022). Clicking on the Go button to the right of the URL field will open the default browser on the specified URL. Clicking with the Control key pressed (Ctrl\u002BClick) will, in addition, invoke the AutoType function on the opened browser page. See the following notes for more information. email: The email address associated with this entry. Note that this is meant for keeping an e-mail address associated with the site, e.g., support@myvendor.com. If the site requires an e-mail address as your login, it\u0027s much easier to set your email address in the Username field. If this field is not empty, then the \u0022Send\u0022 button is enabled. Clicking on this button will invoke the default mail program with the To: field set to the specified address. See the following notes for more options. A few details about URL handling: By default, Password Safe will use the browser that your PC usually opens web pages with. If desired, you can specify an alternate browser by putting \u0027[alt]\u0027 before the URL, e.g., \u0022[alt]http://www.foo.net\u0022. This is useful, for example, if your default browser is Firefox, and you wish to access a website that works best with Chrome. To configure an alternate browser, use the \u0022Manage \u2192 Options \u2192 Misc.\u0022 dialog box. If \u0027{alt}\u0027 is put before the URL, then it is passed \u0027as-is\u0027 to the alternate browser, that is, without adding \u0027http://\u0027 if no protocol is specified. This is useful if the alternate browser is a remote access application, e.g., an SSH client. [ssh] will achieve the same effect. If \u0027[autotype]\u0027 is found before the URL, then after the URL has been displayed/actioned, Password Safe then performs the AutoType action using this entry\u0027s AutoType field, or the default value if not specified. The email address is according to the standard rules (per RFC 2368): The address can be one or more valid email addresses separated by a semicolon, using \u0027Internet-safe\u0027 characters. Use %20 for the space character. The address can be followed by one or more name-value pairs. The first pair should be prefixed by a \u0022?\u0022 and any additional pairs should be prefixed by an ampersand (\u0026). The name can be one of the following strings: subject - followed by text to appear in the subject line of the message. body - followed by text to appear in the body of the message. CC - followed by addresses to be included in the \u0022cc\u0022 (carbon copy) section of the message. BCC - followed by addresses to be included in the \u0022bcc\u0022 (blind carbon copy) section of the message. Example: user@example.com?subject=Message Title\u0026body=Message Content\u0022 Creating a New User Name and Password Entry Open the database where you wish to place the new entry From the Edit menu, select Add Entry Enter information into the Edit/View Entry dialog fields as necessary Note: If a Group name is selected and then a new entry added, that entry will have that Group name prefilled in the Edit/View Entry dialog. If a name of a new group is added to the Group field, that Group will be created. Generating and Editing Passwords If you wish, you can enter your own password into the password field manually, or you can have Password Safe generate a new one using the current Password Policy. To have Password Safe generate a password, just click on Generate in the Edit/View Entry dialog. If you\u0027re unhappy with the result, you can click on Generate again, or edit the password manually. A strength meter underneath the Password field gives a rough indication of the strength of the password. Red indicates a weak password, Yellow a medium-strength one, and Green indicates a strong password. Note: If you\u0027re using a \u0022single sign-on\u0022 system that allows you to share the same password across different machines/servers/applications, etc. you can setup Password Safe entries accordingly, so that changing one password affects all other related entries. This is called \u0022aliasing\u0022 entries, and is explained in detail here. Editing Existing Entries Select the entry to edit from the list Select Edit/View Entry from the Edit menu Editing Existing Entries via the Tree View Select the entry to edit from the list then: Select Edit/View Entry from the Edit menu OR Right-click on the entry and select Edit/View Entry from the context menu You can change the fields that are displayed in the tree view directly. To do so: Right-click on a group and select Rename Group from the context menu OR Press the shortcut key to rename (default F2) and overtype the displayed text (format is \u0022title [username] {password}\u0022). Notes: By default, usernames and passwords are not displayed in the Tree View. Displaying the username and the password are controlled by preferences (see: Display Tab). They work in a hierarchy i.e. passwords can only be displayed if usernames are displayed. Also by default, passwords are obscured when editing the entry. To see the password associated with the entry click Show Password when editing it. The title and password are the only mandatory fields for an entry. Therefore, if they are omitted during rename, they will retain their previous values. However, you may clear the username field, as long as it is being displayed, by entering \u0022[]\u0022 during the rename implying an empty value. Since square and curly brackets are used to delimit the username and password, it is NOT possible to rename an entry in place (e.g. using F2) if the title, username (if displayed) or password (if displayed) contain any of these characters. Instead, you must Edit the entry either via the Edit menu or by the right-click context menu as indicated above. Add a New Group via Tree View Select Add Group from the Edit menu Enter the Group name Edit a Group Name Right-click on the group and select Rename Group from the context menu or Select the group and press the shortcut to rename (default F2) and overtype the group name. Notes: Group names can be \u0022nested\u0022 i.e. placing a group name within/under another group name. A group cannot be renamed to multiple groups through the Rename Group menu item or shortcut, i.e., group \u0022a\u0022 cannot be renamed to \u0022x.y\u0022. Protected Entries If the entry is protected, you will not be able to change any fields until you unprotect the entry via the Edit menu or right-click context menu. "
},
{
  "filename": "Using_Password_Safe/User_Names__Passwords__and_Groups/Additional/index.html",
  "title": "Additional",
  "text": " User Names, Passwords, and Groups: Additional Username, passwords and groups together with the additional parameters are managed in 5 tabs: Basic: all necessary elements for password management Additional: additional specifications, including history Dates and Times: expiry and statistics Attachment: an optional attachment Password Policy: specific differences to the default Additional Tab AutoType: If this field is not empty, then its content replaces the default value for the AutoType function (which is displayed above and comes from either the Password Safe default or this database\u0027s default as set via the \u0022Manage \u2192 Options \u2192 Misc.\u0022 tab). For more information, see the \u0022AutoType\u0022 help topic. Run Cmd: This field can be used to specify a command or program to be run via the \u0027Run Command\u0027 action (via the Edit menu, right-click popup menu or Ctrl-R). Password Safe is able to pass arguments to the command such as the entry\u0027s username, password, etc., as described here. Double click and Shift-Double click on entry: This allows you to define what action Password Safe will take when you double-click, or double-click with Shift depressed, on an entry. The default is to copy the entry\u0027s password and username to the clipboard for double-click and shift \u002B double-click, respectively. The default actions are set in Manage \u2192 Options \u2192 Misc. tab, and marked with \u0022(default)\u0022 in the drop-down lists. Authenticator Secret: Enter the secret key provided by the website for generating one-time (TOTP) authentication codes. Use a direct link to view or copy the secret key whenever available. If only a QR code is shown, scanning it with your phone reveals a URL containing the secret key, which you can enter into this field. Once configured, Password Safe generates the required six-digit authentication codes and can copy them to the clipboard. If you save the secret key, you may also use it with authenticator apps such as Google or Microsoft Authenticator. For more information about generating one-time authentication codes, see Basic Tab. Example of a secret key setup for two-factor authentication. Password History: It is possible to configure Password Safe to save the last few passwords of an entry. This can be done either when the entry is created, or when viewing an existing entry. You see the recent passwords associated with the entry. You can change the number of recent passwords that are kept. For more information see the Password History page here. Keyboard Shortcut: Keyboard shortcuts can be assigned to an entry and allow that entry to be immediately selected irrespective of the current display of the database by pressing the appropriate keystrokes. Additional notes on entry keyboard shortcuts: Entry Keyboard Shortcuts are stored as part of the entry\u0027s record in the database. However, Password Safe also has keyboard shortcuts defined that correspond to its menu items. The scope of the menu item shortcuts is for all databases opened by a given user on a particular PC and can be customised by that user (Manage \u2192 Options, Shortcuts tab) and may change according to the user selected application language e.g. English, German etc. Therefore, although a warning is shown if you select an entry keyboard shortcut that is currently assigned to a menu item, there may not be a conflict if you later customise the menu shortcuts or change the application display language. Similarly, an entry keyboard shortcut may not be in use when added to an entry but could become conflicted if you later customises the menu shortcuts or changes the language. As entry keyboard shortcuts cannot change the database when used, unlike say a menu item shortcut that could delete an entry, as a safety measure, entry keyboard shortcuts take precedence over menu item shortcuts. An entry keyboard shortcut must include the Alt or Ctrl key (with or without the Shift key). If one of these is not included when entering a value, all combinations of the Alt, Ctrl and Shift keys are tried in the order (Alt; Alt\u002BShift; Ctrl; Ctrl\u002BShift, Alt\u002BCtrl; Alt\u002BCtrl\u002BShift) to achieve a unique combination. For example, if the user specifies \u0022Shift \u002B 6\u0022, the shortcut could be changed to \u0022Alt \u002B Shift \u002B 6\u0022. However, if you specify, for example, \u0022Ctrl \u002B 6\u0022 it will not be altered. The keyboard shortcut will be removed from an entry if it is already assigned to another entry in the database, in the following cases: If an entry is imported (via text or XML). This will also be noted in the Import report. If an entry is added during a database merge. This will also be noted in the Merge report. If an entry is \u0022Dragged \u0026 Dropped\u0022 into the database from another database. This will not be the case if an entry is dragged within the same database. If entries are copied to the database via the results of a database Compare dialog. Any entry created via \u0022Duplicate Group\u0022 or \u0022Duplicate Entry\u0022 actions. A list of currently in use entry keyboard shortcuts will be displayed below the Password Safe program related menu shortcuts on the Shortcuts tab via \u0022Manage \u2192 Options \u2192 Shortcuts\u0022. You may double click on the keyboard shortcut in this list to Edit/View the corresponding entry. You may also add the entry keyboard shortcut column to the Flattened List view and/or create a filter to just show those entries with or without keyboard shortcuts. "
},
{
  "filename": "Using_Password_Safe/User_Names__Passwords__and_Groups/Dates_and_Times/index.html",
  "title": "Dates and Times",
  "text": " User Names, Passwords, and Groups: Dates and Times Username, passwords and groups together with the additional parameters are managed in 5 tabs: Basic: all necessary elements for password management Additional: additional specifications, including history Dates and Times: expiry and statistics Attachment: an optional attachment Password Policy: specific differences to the default Dates and Times Tab Password Expires on: To set a password expiration date, specify the desired expiration date, either as an absolute date (e.g., \u0022March 17th 2007\u0022), or relative from today (e.g., \u002230 days from now\u0022). When the expiration date approaches, Password Safe will notify you upon startup that the password should be changed, as well as marking the entry in a distinct color. If you choose \u0022In N days\u0022, then you may specify a \u0022Recurring\u0022 expiration. This will cause a new expiration date to be calculated based on the specified number of days and when you change the entry\u0027s password. For example, if you create an entry on January 1st and specify a 5 day recurring expiration, you will get an expiration notice starting on January 6th. If you change the password on January 7th, then the new expiration will be on January 12th (5 days after the password has been set). To cancel the expiration, select \u0022None\u0022. Statistics: These read-only fields help keep track of when the selected entry was created, last accessed, etc. Note: Password Safe will only warn the user when passwords have expired. It is the user\u0027s responsibility to change the password. There is a menu item ( \u0022View \u2192 Show Entries with Expiry dates\u0022) that will invoke an internal filter to display all the entries with an expiry date set, whether it be not yet expired, soon to expire or already expired. By selecting this menu item again, the filter is removed and the normal display is shown. "
},
{
  "filename": "Using_Password_Safe/User_Names__Passwords__and_Groups/Attachment/index.html",
  "title": "Attachment",
  "text": " User Names, Passwords, and Groups: Attachment Username, passwords and groups together with the additional parameters are managed in 5 tabs: Basic: all necessary elements for password management Additional: additional specifications, including history Dates and Times: expiry and statistics Attachment: an optional attachment Password Policy: specific differences to the default Attachment Tab Password Safe allows you to add an attachment, such as an image (jpeg file) or document (text, pdf, etc.) to an entry. If the attachment is an image, you will see a preview of it in this tab. You can export the attachment as a file, which will be identical to the file you\u0027ve imported, or you can remove the attachment. To Import an Attachment In the Attachment tab, click on the \u0022Import...\u0022 button, and select the file you wish to attach. Note that by default you can only select image files (.jpeg, .png, etc.). If you wish to select a file of another type, click on the file filter to the right of the File name field and select \u0022All files (*.*)\u0022. Note that if the entry already has an attachment, the \u0022Import...\u0022 button will be disabled, since an entry can only have up to one attachment. If you wish to replace the attachment, first click on \u0022Remove\u0022. Optionally, you can give the attachment a descriptive name. Note that this has no relation to the filename, which is what the file was named when you imported it. To Export an Attachment To export an attachment, click on the \u0022Export...\u0022 button and select the location and name of the file. To Remove an Attachment To remove an attachment, just click on the \u0022Remove\u0022 button. Note that if you didn\u0027t intend to remove the attachment, just click on \u0022Cancel\u0022 and the \u0022Discard\u0022 and the removal will not take effect. If you\u0027ve already clicked on \u0022OK\u0022, ou can still undo the removal by selecting Undo under the Edit menu (or typing Ctrl-Z). "
},
{
  "filename": "Using_Password_Safe/User_Names__Passwords__and_Groups/Password_Policy/index.html",
  "title": "Password Policy",
  "text": " User Names, Passwords, and Groups: Password Policy Username, passwords and groups together with the additional parameters are managed in 5 tabs: Basic: all necessary elements for password management Additional: additional specifications, including history Dates and Times: expiry and statistics Attachment: an optional attachment Password Policy: specific differences to the default Password Policy Tab If you don\u0027t want to use the default password policy (see Setting a Password Policy), you can define in this tab a different password policy, marking \u0022Use the policy below\u0022 and setting the appropriate elements. You may also select your own set of symbols to use when generating a password containing them. You may also set this list for the whole database via \u0022Manage \u2192 Options \u2192 Password Policy\u0022 tab and override it for specific entries. "
},
{
  "filename": "Using_Password_Safe/Setting_a_Password_Policy/index.html",
  "title": "Setting a Password Policy",
  "text": " Setting a Password Policy A password policy describes the rules that are used to create a password - the letters, letter cases, length, and any special characters that are required. Some institutions require only lower case characters while others will demand that an upper case character, number, and special character be used, as well as a specified minimum length. In general, it is a good idea to use the longest allowable length and the largest permitted mix of characters. Please verify the exact password requirements with the entities that require them. It is now possible to select the default symbol list that will be used in a database via the \u0022Manage \u2192 Password Policies...\u0022 dialog. In addition, each entry can have its own symbol list specified via the Add or Edit entry dialogs. Note: these symbol lists are not used for either pronounceable or easy-to-read passwords. The Manage Password Policies dialog allows you to set the global password generation policy as well as Named Password Policies. All these are saved in database header and so are database specific. This policy can be overridden temporarily and passwords manually edited at any time in the Edit/View Entry dialog. Selecting Password Rules Each \u0022use\u0022 item (e.g., use digits, use symbols, etc.) checked in the dialog forces Password Safe to include the specified characters in the passwords it generates. Each password will also be generated to the specified length (no shorter, no longer). The only exception to this is the Use hexadecimal digits only check box. When checked, passwords will include those characters that represent hexadecimal digits only. Selecting this option disables all other check boxes. Selecting Generate pronounceable passwords will cause Password Safe to generate a \u0022nonsense\u0022 word that should be pronounceable, such as \u0022ingstria\u0022, \u0022ringsony\u0022, etc. This is useful when you need a password that is both secure and relatively easy to remember without Password Safe. Choosing this option with use digits and/or use symbols will enable replacing some letters with their \u0022leet\u0022 equivalent, e.g., \u0022E\u0022 may be replaced by \u00223\u0022, \u0022S\u0022 by \u00225\u0022, etc. The characters that are added when use symbols is checked are: \u002B - = _ @ # $ % ^ \u0026 ; : , . \u003C \u003E / ~ \\ [ ] ( ) { } ? ! | unless use only easy-to-read characters is selected as well, in which case the characters are only: \u002B - = _ @ # $ % ^ \u0026 \u003C \u003E / ~ \\ ? The letters used when use only easy-to-read characters is checked are: a b c d e f g h i j k m n o p q r s t u v w x y z and A B C D E F G H J K L M N P Q R T U V W X Y, and the digits are limited to 3 4 6 7 8 9. "
},
{
  "filename": "Using_Password_Safe/Keeping_Password_History/index.html",
  "title": "Keeping Password History",
  "text": " Password History Password Safe allows you to keep the last few passwords that were used with a given entry, along with the date that they were set. This is useful to show compliance with password policies as required in some workplaces, and to revert to a previous password if a change did not take effect for some reason. An entry\u0027s password history is accessible via the \u0022Additional\u0022 tab button in the Edit Entry dialog box. You can control the following aspects of password history: Keep N last passwords If you select this checkbox, then recent passwords will be saved with this entry. You can also specify how many passwords to keep. Note: Unchecking this checkbox will not clear the history. It will only stop Password Safe from storing more passwords in this entry. Copy a password Clicking on a row in the list of recent passwords will copy the password displayed in that row to the clipboard. Clear History Clicking on this button will clear the previous passwords stored with this entry. Note: The entry is not actually modified until you click on the OK button in the Edit/View Entry dialog box. If you clicked on Clear History by mistake, just click on Cancel instead of OK in the Edit/View Entry dialog box. Copy All Clicking on this button will copy the entire password history list (dates and passwords) to the clipboard. "
},
{
  "filename": "Using_Password_Safe/Changing_Master_Passwords/index.html",
  "title": "Changing Master Passwords",
  "text": " Changing Master Passwords To change a master password (referred to as \u0022Safe Combination\u0022 in older versions), first open up the database whose password you wish to change. Once opened, go to the Manage menu and select Change Master Password. The following window will be displayed: Note: If you do not have a YubiKey, then the YubiKey buttons will not be displayed, and you can ignore the description of their use below. You should now enter the current master password, followed by the new master password (twice, for confirmation). These can be entered using the physical or virtual keyboard. A strength meter underneath the New Master Password field gives a rough indication of the strength of the password. Red indicates a weak password, Yellow a medium-strength one, and Green indicates a strong password. Your master password should be strong, that is, the bar should be full and green. Password Safe has a built in check for what it considers to be weak master passwords. In general, a master password (like any password) should consist of mixed case characters with at least one number or special character (such as those found above the number keys on a keyboard). If a master password is entered that the program considers weak, it will prompt for confirmation. You may the option to accept the originally entered (weak) password, or to enter a new one. On checking the \u0022Show Master Password\u0022 box, the contents of old and new master passwords will be visible in clear and the confirmation edit box is disabled as no longer necessary. For YubiKey users: In addition to changing the master password as described above, this window allows you to add or remove YubiKey authentication, add or remove additional password authentication, as well as switch the YubiKey that is used to access the current database. Following are instructions for each of these actions: Adding YubiKey Authentication To convert a Password Safe database that is accessed using a Master Password to YubiKey access: Enter the current Master Password in the Old Master Password field Insert you YubiKey If you wish, enter (and confirm) a password in the New Master Password and Confirmation fields. Click on the lower Yubikey button, and then activate your YubiKey. Removing YubiKey Authentication To change the PasswordSafe database so that it is only protected by a master password: Insert your YubiKey If you currently have a password associated with this database, enter it in the Old Master Password field Click on the upper Yubikey button, and then activate your YubiKey Set the New Master Password (and the Confirmation) to the desired value. Click on OK. Adding/Removing/Changing Password Authentication Password Safe can use YubiKey as the only access mechanism, or along with a conventional password. To change from one to another: Insert your YubiKey If you currently have a password associated with this database, enter it in the Old Master Password field Click on the upper Yubikey button, and then activate your YubiKey Set the New Master Password (and the Confirmation) to the desired value: Blank to remove the password, or a new password to add or replace the password. Click on the lower Yubikey button, and then activate your YubiKey. Changing YubiKeys To switch from one YubiKey to another: Insert the old YubiKey If you have a password associated with this database as well, enter it in the Old Master Password field Click on the upper Yubikey button, and then activate your YubiKey Remove the old YubiKey, insert the new one If you wish, enter (and confirm) a password in the New Master Password and Confirmation fields. Click on the lower Yubikey button, and then activate your YubiKey. Notes: There is no mechanism within Password Safe to retrieve lost or forgotten master passwords. This is a deliberate design decision, since any mechanism for retrieving lost passwords poses a security hole that can be exploited. Please choose a difficult-to-guess master password. A trivial password, such as \u0022password\u0022 or your name is easy to guess, and negates the security that Password Safe provides. "
},
{
  "filename": "Using_Password_Safe/Using_Auto_Type/index.html",
  "title": "Using Auto Type",
  "text": " AutoType AutoType provides a means for you to easily and quickly enter user name and password information. This feature is typically used as follows: Browse to the site that you want to login to. Click on the first field that needs to be filled (typically the \u0027username\u0027 or \u0027login\u0027 field). Switch to Password Safe, select the entry corresponding to the website Invoke AutoType (via Control-T or right-click and selecting \u0027Perform Autotype\u0027. This causes the user name and password to be entered and submitted. By default, the formula followed by the automated keystrokes is as follows: the user name, followed by a tab key, followed by the password, another tab, and then the enter key (username TAB password TAB ENTER). This works fine for most web sites that require username/password authentication. For web sites or applications that require different data, you can tailor the AutoType behaviour as described in the Customizing AutoType section below. Note that you can also customize the default AutoType text via the Misc. tab in the Options dialog box. This can be useful if, for example, the default AutoType timing is too fast for your machine. In addition, you can invoke AutoType after running an arbitrary command specified in the entry\u0027s Run Cmd field. This is a very convenient combination. Note: If an entry has been selected due to a Find action, then the menu item \u0022Perform AutoType\u0022 (and its shortcut if still defined) will use the information of this entry. However, if another entry is then selected, even though there is the found entry is still highlighted, the information of the newly selected entry will be used instead. Using AutoType Place cursor in the form\u0027s username field Maximize or open Password Safe Select a password entry Ctrl\u002BT or right-click and select Perform AutoType or click on the Toolbar button to initiate. Customizing AutoType For web sites or applications that do not have the username field followed by the password field followed by the login button, you can modify the behavior by filling in the entry\u0027s \u0022AutoType\u0022 field with text that specifies the desired behavior as follows: \\u is replaced by the username associated with the entry. \\p is replaced by the password associated with the entry. \\q is replaced by the last password associated with the entry from the entry\u0027s password history as long as this entry\u0027s password history is still active. If not active or if there are no current old passwords, the field is removed but not replaced with anything. \\g is replaced by the group associated with the entry. \\i is replaced by the title associated with the entry. \\l is replaced by the URL associated with the entry (that\u0027s the letter ell, not the digit \u00271\u0027). \\m is replaced by the e-mail associated with the entry. \\2 is replaced by the current authentication code associated with the entry, if an authenticator secret key has been defined for the entry. \\o is replaced by the contents of the (possibly multi-line) Notes field. Any end of line characters \u0027\\n\u0027, \u0027\\r\u0027 or \u0027\\r\\n\u0027 are converted to \u0027\\r\u0027 (carriage return). No substitution is made to escape sequences within the Notes field (e.g. \u0027\\u\u0027, \u0027\\p\u0027 etc.) except for the \u0027\\t\u0027 sequence, which is replaced by the Tab character and \u0027\\s\u0027 sequence, which is replaced by \u0022Shift\u002BTab\u0022. \\oNNN is replaced by the contents of the nth line of the Notes field NNN can be one to three digits (e.g., \\o5 for the 5th line, \\o45 for the 45th, etc. if NNN is larger than the number of lines in the notes field, then this has no effect and no lines from the Notes field are copied. if NNN is zero then all lines are copied i.e. \\o0 is equivalent to \\o. End of line characters are not included. Note that this is a convenient way to support autotyping for applications that require a second password or other arbitrary text as part of the authentication process. \\b is replaced by the backspace key. \\t is replaced by the Tab key, in effect skipping a field on the website\u0027s form. \\s is replaced by the \u0022Shift\u002BTab\u0022, in effect back-tabbing to the previous field. \\n is replaced by the enter key, in effect pressing a button. \\e is replaced by the Esc key. \\\\ is replaced by the backslash (\\) key. \\dNNN sets the delay between characters to NNN milliseconds, instead of 10 (the default). This changes the delay for the current and all subsequent characters. For example, \u0022fast\\d500slow\u0022 will result in \u0027fast\u0027 being typed with the default delay, and the letters \u0027s\u0027, \u0027l\u0027, \u0027o\u0027, and \u0027w\u0027 typed with a half-second pause before each. if you want to put in a one-time delay that does not affect the speed of the following characters, use \u0027\\w\u0027 or \u0027\\W\u0027, as described below. Note that NNN is limited to a maximum of three digits. \\wNNN or \\WNNN introduces a delay of NNN milliseconds for \\w, or seconds if \\W is used. For example, \u0022how\\w500now\u0022 will cause \u0027how\u0027 to be typed (at the default rate or that specified by the last \\d), followed by a half-second pause, followed by \u0027now\u0027 typed at the same rate as \u0027how\u0027). Likewise, \u0022how\\W2now\u0022 will introduce a two second pause between the two words. This is useful for fine-tuning the timing with certain web pages. Note that NNN is limited to a maximum of three digits, so that, for example, \\w5000 will create a half-second delay and then emit the letter \u00270\u0027, which is probably not what you intended (\\W5 would do the trick, though). \\v{value} types the value of the Custom Field whose name matches value. For example, if the entry has a Custom Field named \u0022PIN\u0022 with the value \u00221234\u0022, then \u0022\\v{PIN}\u0022 will type \u00221234\u0022. If there is no matching Custom Field, nothing is typed. \\z (Windows only) invokes the old AutoType mechanism. This mechanism may handle non-Latin characters incorrectly, but can make AutoType work on certain problematical web sites. If you find that AutoType does not work properly on a particular web site, try this code at the beginning of the AutoType command field. However, if this field is specified anywhere in the AutoType string, it applies to the whole string. \\# (Windows only) is exactly the same as \\z above except that it toggles using the old AutoType mechanism on/off for the part of the AutoType string between these codes. The use of \\# instead of \\z may prevent issues with sending non-Latin characters in other parts of the AutoType string as can happen when using the \\z field. However, \\# will be ignored if the \\z field has been specified anywhere in the AutoType string.. For example, the following will switch to the old mechanism to just send a tab and a space: \\#\\t \\# \\c (Linux only) generates the key events that cause a platform-specific Select-All command. It is useful when autotype conflicts with browser\u0027s autofill, where the two texts combine instead of autotype\u0027d text replacing the auto-filled text. Generating a \\c at the start of autotyping inside a field (at the very beginning of autotype string, or just after a \\t) ensures that the autofill\u0027ed text gets replaced by the autotype\u0027d text. For some sites, you might also need to autotype slowly, for which put \\d100 at the beginning of your autotype string. So your autotype string could look like \\d100\\c\\u\\t\\c\\p\\n \\j (Linux only) starts generating independent key events for modifier keys like ALT, SHIFT, etc. \\k (Linux only) stops generating independent keystrokes for modifier keys and only simulates the modifications (like making things uppercase) with flags to main key events. \\j and \\k could be useful when you find that autotype is not maintaining case-sensitivity of autotyped text, or is producing the lower keys (3 instead of #). All other text is typed as-is. For Windows only, the following special control codes are also implemented: \\{Enter} Enter key \\{Up} Up-arrow key \\{Down} Down-arrow key \\{Left} Left-arrow key \\{Right} Right-arrow key \\{Home} Home key \\{End} End key \\{PgUp} Page-up key \\{PgDn} Page-down key \\{Tab} Tab key \\{Space} Space bar The special control code between the curley brackets is not case sensitive and is unaffected by the presence of the \u0022\\z\u0022 AutoType field. In addition, the following modifiers can be combined with the above special control codes. These must precede the code and can be combined in any order. They are: ! Alt key ^ Control key \u002B Shift key For example: \u0022\\{\u002BTab}\u0022 is equivalent to \u0022Shift\u002BTab\u0022 \u0022\\{\u002B^Tab}\u0022 is equivalent to \u0022Ctrl\u002BShift\u002BTab\u0022 \u0022\\{^Home}\u0022 is equivalent to \u0022Control\u002BHome\u0022. Shortcuts and Aliases Shortcuts AutoType of a shortcut uses the AutoType string of its base entry. The values substituded in that string, e.g., \\p for password, come for the shortcut\u0027s base entry, except for the fields that can be set for the shortcut itself, namely its group, title and user. Aliases The AutoType string and all entry variables except the current password (\\p) and previous password (\\q) come from the alias entry. These come from the alias\u0027s base entry. Default AutoType The default autotype sequence in Password Safe is \\u\\t\\p\\n. This default can be changed via the Manage/Options menu (Misc. tab). Examples Example 1: The following can be used where the bank account number (12345) must be entered before the user and password: 12345\\t\\u\\t\\p\\t\\n Example 2: The following, sent in by a user, clears the username field before username and password autotype begins. Non-empty username fields are very common. Some sites remember the username even when the user does not want it to or user forgets to clear the don\u0027t remember username and, because of browser cookies, it is remembered anyway, or if login fails for whatever reason on the first attempt the username would still remain. This autotype sequence is meant to ensure that the user doesn\u0027t have to clear the username field first. \\t\\s\\u\\t\\p\\n Example 3: The following sequence, also sent in by a user, toggles a checkbox (e.g., disables keeping you logged in): \\#\\t \\# Note: You may need more tabs (\u0027\\t\u0027) in order to get to the desired checkbox on any particular webpage. Also, please see above on possible issues when using the \u0027\\z\u0027 field. Note: If you are having problems with AutoType, you might want to disable 3rd-party popup-blockers. Users have reported problems with the interaction of popup-blockers with the AutoType functionality. "
},
{
  "filename": "Using_Password_Safe/Backing_Up_and_Restoring_Databases/index.html",
  "title": "Backing Up and Restoring Databases",
  "text": " Backing Up and Restoring Databases Since the information stored in a password database is usually both sensitive and important, Password Safe provides several mechanisms for backing up and restoring password databases. This section describes how to manually make backups of your password database Password Safe can also be configured to make automatic backups of your database whenever the database is saved. Such backups are called intermediate backups, and are described here. Make a Backup Safely create a copy of the current password database. Click Make Backup Select a location for the backup file Click Save Note: It is strongly recommended that you make frequent backups of your password databases. This will help safeguard password lists against system crashes or corrupted files. The backup is encrypted using the same master password as the current database being backed up. In particular, via the Backups tab in the Options dialog box, you may specify how many backups to keep (we recommend a minimum of 3 to 5) and whether to use an incremental number or date/time value in the backup file name. Restore from Backup Restore a backed up password database file. Click Restore from Backup Navigate to the backup location and select the file to restore Click Open and a password prompt will be displayed. Enter the database password and click OK Notes: The restored database is not \u0022saved\u0022 with the standard Password Safe database extension (.psafe3) until you have selected Save or Save As from the file menu. You will be prompted to \u0022Save\u0022 the database and give it a name if you have not saved it prior to exiting the application. In addition to the backup and restore described here, Password Safe automatically keeps a copy of the database before you save a change. The copy is in the same directory as the current database, and the name is identical, except for the extension, which is \u0022.ibak\u0022, meaning \u0022incremental backup\u0022, instead of \u0022.psafe3\u0022. See here for more information about the automatic backups. "
},
{
  "filename": "Using_Password_Safe/Automatic_Intermediate_Backups/index.html",
  "title": "Automatic Intermediate Backups",
  "text": " Backups Tab The Backups Tab allows you to configure how automatic backups are created and managed. Save database immediately after any change When checked, the database will be saved if there is any change e.g., add, delete, duplicate, edit or rename of an entry or group as well as if any entries/groups are added/moved via import or Drag \u0026 Drop. When this is used, enabling \u0022Create intermediate backups\u0022 is recommended, as this helps protect against disk problems. Note that changes made via the Compare database results dialog will not cause a database save for each action, but only after the compare results dialog has been closed. Create intermediate backups (.ibak) before saving When checked, Password Safe will copy the database before each save. The names and location of the backup copies are defined in the following fields, as well as how many previous copies will be kept. Backup Name The names of the backup files consist of Base (by default, the name of the database without the .psafe3 extension), and Suffix (none, a running count, or the date/time of the backup). Here you can configure what the backups will be named, and how many will be saved. Password Safe will automatically erase the oldest databases beyond the number of backups that you specified. Note that Password Safe will only erase old databases if the suffix is an incremented number (running count). Backup Directory By default, Password Safe will store the backups in the same directory as the currently open database. In this field you can specify an alternate location, such as a special backup directory, network drive, disk-on-key, etc. Of course, you must have write permission to the location you specify. You may also use environment variables in defining the alternate location for example: \u0022%homedrive%%homepath%\\Documents\\PWS Backups\\\u0022. If you use these variables, the expanded path will be shown underneath once you navigate to a different control on this tab. "
},
{
  "filename": "Using_Password_Safe/Automatic_Failsafe_Backups/index.html",
  "title": "Automatic Failsafe Backups",
  "text": " Failsafe Backups When Password Safe exits normally, you are prompted if there are unsaved changes to the database. However, if you log off your Windows session, shutdown or restart your PC, then Password Safe may not have the opportunity to prompt you (the exact behaviour depends on the type of shutdown and the version of Windows). In this case, Password Safe will attempt to make a \u0022Failsafe Backup\u0022 (file extension \u0027fbak\u0027). This will be created in the same directory as the currently open database. The current database and its \u0022regular\u0022 backups will not be touched. When the original database is opened again, Password Safe will check for the existence of any Failsafe Backup file and, if found, will display a dialog similar to that below. The first row is the specified database followed by general information about it (the same as shown in the Properties dialog from the File menu). This is followed by the Failsafe Backup file(s). If they can be opened with the same passphrase as the currently open database, then their properties are also displayed. If they have a different passphrase or are not a valid database, then a \u0027No\u0027 is displayed in the Passphrase column and no properties are displayed. Your choices are as follows: Continue Clicking on this causes Password Safe to ignore all Failsafe backup files and continue with the currently selected database. Select The selected Failsafe Backup file will be opened instead of the currently selected database. Delete This will delete the selected Failsafe Backup file. If Windows supports a Recycle Bin on this media (usually only local disks), it will be moved there. If not, it will be permanently deleted. Exit If this is the first database opened on the startup of Password Safe, Password Safe will exit. If not, the new open will be cancelled and the existing opened database, if any, will remain open. Help Displays this Help topic. Suggestions: If you are unable to choose, continue with the current database and use the database Compare function from the File menu to show the exact differences between the current and the Failsafe backup(s). If you do open a Failsafe Backup and have decided that it is the version you wish to keep, you should save it as a normal database. When you do, consider renaming the original first or save the Failsafe Backup with a completely new name. Once you are satisfied that you have recovered the correct database, either the original or a Failsafe Backup, you should delete any old Failsafe Backups so that you will not be prompted to decide at a later date. Note: If you use this dialog to delete these files, they will be sent to the Recycle Bin, if your version of Windows supports it on the media containing them. Note: There is nothing that ANY application can do to save information if the PC is just switched off, loses power or the processor, the hard disk or any other component fails. As with all data important to you, you should backup your data to another media regularly. This could be to USB pen drives, external hard disks, network drives, CDs or DVDs etc. These backups should be stored somewhere safe. "
},
{
  "filename": "Using_Password_Safe/Importing_Entries/index.html",
  "title": "Importing Entries",
  "text": " Importing Entries Password Safe allows you to import password information from other formats. These files may be generated by other applications, exported from a spreadsheet, or even written by hand using Notepad or a similar text editor. The formats that Password Safe supports are: Text XML KeePass V1 TXT and CSV Files KeePass V2 via KeePass V1 CSV Files KeePass V1 and V2 XML Files Password Safe generates a report at the end of the import operation, summarizing what was done and noting any problems that may have occurred. This report may be copied to the clipboard or saved to disk as a text file in the same directory as the database. The \u0022View \u2192 Reports\u0022 menu item may then be used to view the reports at a later date. The name of the report file is fixed and depends on the function that created it. If the same function is repeated and its report saved to disk, any existing report for this function will be overwritten. Note: The report may contain sensitive data and care should be taken when selecting the \u0022save to disk\u0022 option. Note: You can also \u0027import\u0027 a subset of entries from another Password Safe database, by opening the other database with Password Safe (assuming you permit multiple instances via \u0022Manage \u2192 Options \u2192 System\u0022 tab). Then you can simply drag and drop any entries or groups to your open database from this \u0027import\u0027 database. Text Format Text files used to import password entries consist of one or more password entries. Each field within an entry is separated by a field separator and each entry may consist of one or more lines. Details on the expected format of the imported text file may be found in the \u0022Plain Text Export \u0026 Import Format\u0022 section. Import Text Settings Dialog The field separator used in the text file being imported and a default group name to import the new entries into can be configured before processing the file. \u0022File \u2192 Import From....\u0022 Select Plain Text... Set import settings and parameters for the text file being imported If a Notes field multi-line delimiter character has been used, either in a previous Export or using a text editor, enter it here so that, during the Import process, the Notes field will be split into multiple lines by replacing this character by a newline. Click OK Select the text file to import. At the end of the import process, a small dialog box appears showing how many entries were added, and how many (if any) were unsuccessfully parsed. IMPORTANT: If an entry that uses a Password Policy Name is imported and that name is not already in the current receiving database, then the resulting entry in the database will revert to using the database\u0027s default Password Policy. IMPORTANT: The first line of the file being imported must be a tab-separated list of the names of the fields that each entry contains, e.g., \u0022Group/Title Username Password URL\u0022, etc. This line is generated automatically by the \u0022Export Text\u0022 function, but must be added manually for files created from other tools. XML XML (eXtensible Markup Language) is a popular format for transferring data between applications. Password Safe can import XML files that were generated according to the schema defined in the file pwsafe.xsd, which is provided as part of the distribution. When importing XML into an empty database, any database preferences in the beginning of the XML input file will be imported into the database. If the current receiving database already has entries, then these preferences will be ignored. However, any \u0022Password Policy Names\u0022 in the XML input file will be imported irrespective of whether there are entries already in the current receiving database. Note however, if a Password Policy with the same name already exists in the database, it will not be overwritten by the values in the XML input file. If an entry that uses a Password Policy Name is imported and that name is neither in the current receiving database nor in XML input file, then the resulting entry in the database will revert to using the database\u0027s default Password Policy. Change of the coding of XML Date/time values Prior to PasswordSafe V3.26, date time fields were exported in our own format: \u003Cname\u003E \u003Cdate\u003Eyyyy-mm-dd\u003C/date\u003E \u003Ctime\u003Ehh:mm:ss\u003C/time\u003E \u003C/name\u003E Where \u0022name\u0022 was any of our record date/time fields e.g. \u0027ctime\u0027, \u0027atime\u0027, \u0027xtime\u0027, \u0027pmtime\u0027, \u0027rmtime\u0027 and the password history \u0027changed\u0027 date/time. However, from V3.26 onwards, PasswordSafe will only export XML date/time fields using the International W3C Standard date/time format. V3.26 and V3.27 can input either format but for versions after 3.27, it will only accept the W3C standard. The W3C standard for XML date/time fields is: \u003Cnamex\u003Eyyyy-mm-ddThh:mm:ss\u003C/namex\u003E Where we have changed the \u0022name\u0022 to distinguish the fields from the old format by appending an \u0027x\u0027 and so \u0027namex\u0027 is any of our new record date/time fields e.g. \u0027ctimex\u0027, \u0027atimex\u0027, \u0027xtimex\u0027, \u0027pmtimex\u0027, \u0027rmtimex\u0027 and the password history \u0027changedx\u0027 date/time. To import an older format XML file with date/time fields, you must manually edit these fields to convert to the old PasswordSafe format to the W3C standard format. KeePass V1 TXT and CSV Files The recommended import of KeePass V1 database entries is via XML as described below. TXT File You may also import a TXT file exported from Keepass V1 (tested on files created by V1.19b). The following fields are converted to the Password Safe equivalents: Each new entry starts with a line beginning with \u0027[\u0027 and ending with as \u0027]\u0027. The text between these will be imported as the \u0027Title\u0027 of this entry. Each piece of information is on one line and the following tags are at the beginning of each line: \u0022Group: \u0022 becomes the entry\u0027s Group \u0022Group Tree: \u0022 becomes the entry\u0027s group hierarchy to the root \u0022User Name: \u0022 becomes the entry\u0027s User Name \u0022Password: \u0022 becomes the entry\u0027s Password \u0022URL: \u0022 becomes the entry\u0027s URL \u0022Notes: \u0022 becomes the entry\u0027s Notes \u0022UUID: \u0022 becomes the internal unique ID of the Password Safe entry \u0022Creation Time: \u0022 becomes the entry\u0027s creation time \u0022Last Access: \u0022 becomes the entry\u0027s last accessed time \u0022Last Modification: \u0022 becomes the entry\u0027s password and the entry\u0027s last modification time \u0022Expires: \u0022 becomes the entry\u0027s expiry date The following fields are currently ignored: \u0022Icon\u0022 \u0022Attachment Description\u0022 \u0022Attachment\u0022 - do NOT export this field as it can make the export file extremely large. Note that times in Password Safe must be earlier than January 19, 2038. Any time later than this is currently treated as invalid and the associated field is unset. Please note, you MUST check the box \u0022Encode/replace newline characters by \u0027\\n\u0027\u0022 during the export from Keepass V1 or the import may fail or give unexpected results. CSV File You may also import a CSV (Comma Separated Values) file exported from Keepass V1 (tested on files created by V1.19b). The following fields are converted to the Password Safe equivalents: \u0022Password Groups\u0022 becomes the entry\u0027s Group \u0022Group Tree\u0022 becomes the entry\u0027s group hierarchy to the root \u0022Account\u0022 becomes the entry\u0027s Title \u0022Login Name\u0022 becomes the entry\u0027s User Name \u0022Password\u0022 becomes the entry\u0027s Password \u0022Web Site\u0022 becomes the entry\u0027s URL \u0022Comments\u0022 becomes the entry\u0027s Notes \u0022UUID\u0022 becomes the internal unique ID of the Password Safe entry \u0022Creation Time\u0022 becomes the entry\u0027s creation time \u0022Last Access\u0022 becomes the entry\u0027s last accessed time \u0022Last Modification\u0022 becomes the entry\u0027s password and the entry\u0027s last modification time \u0022Expires\u0022 becomes the entry\u0027s expiry date The following fields are currently ignored: \u0022Icon\u0022 \u0022Attachment Description\u0022 \u0022Attachment\u0022 - do NOT export this field as it can make the export file extremely large. Note that times in Password Safe must be earlier than January 19, 2038. Any time later than this is currently treated as invalid and that the associated field is unset. Please note, you MUST check the box \u0022Encode/replace newline characters by \u0027\\n\u0027\u0022 during the export from Keepass V1 or the import may fail or give unexpected results. KeePass V2 via KeePass V1 CSV Files The recommended import of KeePass V2 database entries is via XML as described below. Password Safe cannot import any file created by KeePass V2 - even the KeePass V1 CSV format available from this program. However, it is possible to export a KeePass V2 database as a KeePass V1 database. You may then export this to either a TXT or CSV file and imported as described above. KeePass V1 and V2 XML Files Password Safe cannot directly import a XML file exported by KeePass V1 or V2 as the fields are too different. However, we have provided XSL Transform files (KPV1_to_PWS.xslt and KPV2_to_PWS.xslt). The programs listed below may be used to process the exported XML file with one of these XSLT files to produce a Password Safe compatible XML file that can then be imported to Password Safe V3.26 or later. The XSLT files conform to V1.0 of XSLT as described in http://www.w3.org/TR/xslt and have been tested with XML files created by KeePass V1.19b and KeePass V2.15. Note that times in Password Safe must be earlier than January 19, 2038. Any time later than this is currently treated as invalid and that the associated field is unset. Under Windows, the following XSLT processors support the supplied XSL Transform files. The example command line execution of these processors assume: The style sheet to convert the KeePass XML file to a Password Safe XML file is: KPV1_to_PWS.xslt or KPV2_to_PWS.xslt. The input KeePass V1 or V2 XML file is: KeePassV1.xml or KeePassV2.xml The output Password Safe XML file will be: PWS.xml All input and output files are in the same directory as the XSLT processor. If not, you will need to enter the full path of these files. The command line program from Microsoft (XSLT Processor Version 4.0). The properties of the file msxsl.exe state that it is V1.1.0.1 and dated 2001, although the web site states that it is V2.0 and dated 19 September 2004. It can currently be found at http://www.microsoft.com/downloads. It requires Microsoft Core XML Services (MSXML) V4.0 to be installed. Whilst the latest MSXML version is V6, V4 is normally installed on all versions of Windows supported by Password Safe. For KeePass V1 XML file use the command: msxsl KeePassV1.xml KPV1_to_PWS.xslt -o PWS.xml For KeePass V2 XML file use the command: msxsl KeePassV2.xml KPV2_to_PWS.xslt -o PWS.xml AltovaXML Community Edition (current version 2011r3). See http://www.altova.com/altovaxml.html. For KeePass V1 XML file use the command: AltovaXML -xslt1 KPV1_to_PWS.xslt -in KeePassV1.xml -out PWS.xml For KeePass V2 XML file use the command: AltovaXML -xslt1 KPV2_to_PWS.xslt -in KeePassV2.xml -out PWS.xml Saxon-HE (Home Edition) (current version 9.3.0.5). See http://saxon.sourceforge.net/. There is also a graphical front-end for Saxon called Kernow. See http://kernowforsaxon.sourceforge.net/. The format of the command depends on whether you use the Java or .Net version of Saxon-HE and/or Kernow. Please refer to the product\u0027s documentation for further information. All these programs are free, although Kernow needs to be registered if used more than 100 times. KeePass V1 XML Special Processing If a KeePass group contains a dot (\u0027.\u0027), it is converted to a forward slash (\u0027/\u0027) when added to Password Safe, since dots are used as group delimiters by Password Safe. All \u0027carriage return\u0027 characters are removed from the Notes field and all \u0027newline\u0027 characters are converted to the normal Password Safe delimiter \u0027\u00BB\u0027 used to denote new lines within the Notes field. The KeePass entry\u0027s UUID will be transferred to the Password Safe entry unless it is already used within that database (which is very unlikely), in which case a new value will be calculated during import. KeePass V1 XML Elements Password Safe XML Element Equivalent \u003Cgroup\u003E \u003Cgroup\u003E \u003Ctitle\u003E \u003Ctitle\u003E \u003Cusername\u003E \u003Cusername\u003E \u003Cpassword\u003E \u003Cpassword\u003E \u003Curl\u003E \u003Curl\u003E \u003Cnotes\u003E \u003Cnotes\u003E \u003Clastmodtime\u003E \u003Cpmtimex\u003E and \u003Crmtimex\u003E \u003Ccreationtime\u003E \u003Cctimex\u003E \u003Clastaccesstime\u003E \u003Catimex\u003E \u003Cexpiretime\u003E \u003Cxtimex\u003E, if the KeePass \u003Cexpiretime\u003E attribute \u0022expires\u0022 is \u0027true\u0027 \u003Cimage\u003E \u003Cattachdesc\u003E \u003Cattachment\u003E These have no Password Safe equivalent and are ignored KeePass V2 XML Special Processing The \u0027\u003CHistoryMaxItems\u003E\u0027 field from the \u0027\u003CMeta\u003E\u0027 section of the KeePass V2 XML file is used as the maximum number of passwords to be saved in an Password Safe\u0027s entry password history. All other fields in this section are ignored. If a KeePass group contains a dot (\u0027.\u0027), it is converted to a forward slash (\u0027/\u0027) when added to Password Safe, since dots are used as group delimiters by to Password Safe. All \u0027carriage return\u0027 characters are removed from the Notes field and all \u0027newline\u0027 characters are converted to the normal Password Safe delimiter \u0027\u00BB\u0027 used to denote new lines within the Notes field. The KeePass entry\u0027s UUID will be transferred to the Password Safe entry unless it is already used within that database (which is very unlikely), in which case a new value will be calculated during import. If the \u0027\u003CDefaultAutoTypeSequence\u003E\u0027 field is present within a KeePass group is used as the default Password Safe AutoType field for entries within that group. If an entry\u0027s \u0027\u003CAutoType\u003E\u0027 field is set to \u0027True\u0027 and the \u0027\u003CDefaultSequence\u003E\u0027 is not empty, then this is used as the Password Safe\u0027s entry\u0027s AutoType sequence. If it is \u0027True\u0027 but \u0027\u003CDefaultSequence\u003E\u0027 is empty, then the \u0027\u003CDefaultAutoTypeSequence\u003E\u0027 field from the parent group is used as the Password Safe\u0027s entry\u0027s AutoType sequence. If the \u0027\u003COverrideURL\u003E\u0027 field is not empty, its value is inserted into the Notes field and prefixed by \u0022OverrideURL:\u0022 and the URL field is prefixed by \u0022[alt]\u0022. If the URL string begins with \u0022\\\\\u0022 or \u0022cmd://\u0022 (case insensitive) the field is placed in the Password Safe\u0027s entry\u0027s Run Command field and Placeholder substitution is performed (see below). If neither of these prefixes appear in the URL string, it is placed in the Password Safe\u0027s entry\u0027s URL field with only {S:FieldName} substitution. If the \u0027\u003CTags\u003E\u0027 field is not empty, its value is inserted into the Notes field and prefixed by \u0022Tags:\u0022. KeePass V2 exports all strings, e.g. Title, in a \u0022String\u0022 section with \u0022Key\u0022 and \u0022Value\u0022 sub-elements. For example: \u003CString\u003E \u003CKey\u003ETitle\u003C/Key\u003E \u003CValue\u003ETest title\u003C/Value\u003E \u003C/String\u003E The following table shows the conversion of these to the Password Save equivalent XML element. KeePass V2 String Keys Password Safe Entry XML Element Equivalent Title \u003Ctitle\u003E Username \u003Cusername\u003E Password \u003Cpassword\u003E URL \u003Curl\u003E or \u003Cruncommand\u003E depending on the prefix (see notes above) Notes \u003Cnotes\u003E All others Inserted into the Password Safe Notes field in the form: \u0022Key: Value\u0022 KeePass V2 exports all date/time fields, e.g. creation time, in a \u0022Times\u0022 section. For example: \u003CTimes\u003E \u003CLastModificationTime\u003E2011-05-30T14:20:57Z\u003C/LastModificationTime\u003E \u003CCreationTime\u003E2011-05-27T18:09:29Z\u003C/CreationTime\u003E \u003CLastAccessTime\u003E2011-05-30T14:20:57Z\u003C/LastAccessTime\u003E \u003CExpiryTime\u003E2999-12-28T23:59:59Z\u003C/ExpiryTime\u003E \u003CExpires\u003EFalse\u003C/Expires\u003E \u003C/Times\u003E The following table shows the conversion of these to the Password Save equivalent XML element. KeePass V2 Time Values Password Safe Entry XML Element Equivalent \u003CTimes\u003E/\u003CLastModificationTime\u003E \u003Cpmtimex\u003E and \u003Crmtimex\u003E \u003CTimes\u003E/\u003CCreationTime\u003E \u003Cctimex\u003E \u003CTimes\u003E/\u003CLastAccessTime\u003E \u003Catimex\u003E \u003CTimes\u003E/\u003CExpiryTime\u003E \u003Cxtimex\u003E if \u003CTimes\u003E/\u003CExpires\u003E is \u0027True\u0027 KeePass V2 can create an history section when anything is changed in an entry. Password Safe only saves password changes. All other saved changed fields in the KeePass XML element are ignored. KeePass V2 History Password Safe Entry XML Element Equivalent \u003CTimes\u003E/\u003CLastModificationTime\u003E \u003Chistory_entry\u003E/\u003Cchangedx\u003E \u003CString[Key=\u0027Password\u0027]\u003E \u003Chistory_entry\u003E/\u003Coldpassword\u003E All other tags from \u003CHistory\u003E Ignored The following KeePass V2 Auto-type special codes (see http://keepass.info/help/base/autotype.html) are translated as follows. All codes not listed are copied across as-is. KeePass V2 Auto-type Password Safe Equivalent \\ \\\\ (escaping \u0027\\\u0027) Tab {TAB} \\t Enter {ENTER} or ~ \\n Backspace {BACKSPACE}, {BS} or {BKSP} \\b Keypad \u002B {ADD} \u002B Keypad - {SUBTRACT} - Keypad * {MULTIPLY} * Keypad / {DIVIDE} / \u002B {\u002B} \u002B ^ {^} ^ % {%} % ~ {~} ~ (, ) {(}, {)} (, ) {DELAY X} Delays X milliseconds. \\wX (\\WX) {DELAY=X} Sets the default delay to X milliseconds for all standard keypresses in this sequence. \\dX The following KeePass V2 Placeholders (see http://keepass.info/help/base/placeholders.html) are translated as follows. All codes not listed are copied across as-is. Placeholders are case-insensitive. Custom strings can be referenced using {S:Name}. For example, if the database has a custom string named \u0022eMail\u0022, it can be referenced via the placeholder {S:eMail}. KeePass V2 Placeholder Password Safe AutoType Password Safe Run Command {GROUP} \\g ${G} {TITLE} \\i ${t} {USERNAME} \\u ${u} {PASSWORD} \\p ${p} {NOTES} \\o ${n} KeePass V2 Placeholder Password Safe Run Command \\{ \\\\{ (escaping \\) $ \\$ (escaping $) {GROUPPATH} ${g} {URL} ${url} {URL:RMVSCM} ${url} {APPDIR} ${appdir} {DB_PATH} ${fulldb} {DB_DIR} ${dbdir} {DB_NAME} ${dbname}.${dbextn} {DB_BASENAME} ${dbname} {DB_EXT} ${dbextn} All others Copied unchanged "
},
{
  "filename": "Using_Password_Safe/Exporting_Entries/index.html",
  "title": "Exporting Entries",
  "text": " Exporting Entries Password Safe supports exporting (and importing) of the stored passwords to (and from) various formats. To export password entries use the \u0022File \u2192 Export To\u0022 menu. The supported formats are: Password Safe v1 (for use by versions 1.x of Password Safe) Password Safe v2 (for use by versions 2.x of Password Safe) Plain text XML Subsets of the database For previous versions of Password Safe, just select the desired format and specify the name of the database file you wish to create. In addition, to \u0027export\u0027 a subset of entries to another Password Safe database, just start Password Safe (assuming you permit multiple instances via \u0022Manage \u2192 Options \u2192 System\u0022 tab) and create a new database, whilst having your normal database open in another instance. Then you can simply drag and drop any entries or groups from your open database to this \u0027export\u0027 database. Export uses a Wizard interface. You may also select the Advanced field selection in order to restrict which entries you export and which field of these entries you export from your current database. See here for more details. A report of the actions taken will be available on completion and this may be copied to the clipboard or saved to disk as a text file in the same directory as the database. The \u0022View \u2192 Reports\u0022 menu item may then be used to view the reports at a later date. The name of the report file is fixed and dependent on the function that created it. If the same function is repeated and its report saved to disk, any existing report for this function will be overwritten. Note: The report may contain sensitive data and care should be taken when selecting the \u0022save to disk\u0022 option. Text Export Note: The exported text is an unprotected copy of the specified password entries. Deleting this copy after use is not sufficient for making it inaccessible to a determined attacker and in effect bypasses the security of the program Please DO NOT use this function unless you understand and accept the risks. Password Safe allows you to export password entries to text files. These files may then be used or modified by other applications. You will be asked to enter the master password to confirm that you may export the database into a clear text unencrypted file before you can export its contents. If you\u0027re using YubiKey authentication, click on the Yubikey button, then activate your YubiKey. You will also be required to supply the name of the new file and to confirm overwriting of it if a file of the same name if it already exists in the directory you specified. Note: If you do not have a YubiKey, the screen shown above will not have the YubiKey button and text displayed. You can also specify some options: Password entries will be exported with a tab character between fields i.e., between the Group.Title, Username, Password and the Notes fields. The \u0022Group.Title\u0022 is considered a single field. Any field containing a blank will be output inside double quotation characters. Only the Notes field can contain multiple line entries. The normal processing is to place each Notes line on a separate line in the exported text field. However, this makes it difficult to sort or to use when comparing two different export files. To overcome this, you may specify a delimiter to separate multiple lines when exporting them. If you are going to import a text file created with such a delimiter, then it must be specified, all the Notes lines will appear as one single line in the resulting database. If required, tick that you want to put all separate lines in the Notes field onto one line and enter the character to be used as the delimiter. Since the whole Notes field is enclosed between double quotation marks, this character is prohibited from being selected as the multi-line delimiter. Selecting \u0022Advanced field selection\u0022 will display this Wizard page to allow you to export only some of the entries, based on the text in specified fields, and/or specify which fields are to be exported. See here for more details. Note: Details on the format of the exported text file may be found in the \u0022Plain Text Export \u0026 Import Format\u0022 section. XML XML (eXtensible Markup Language) is a popular format for transferring data between applications. Password Safe can export (and import) the database entries to this format. The structure (or schema) against which the data is exported and validated is defined in the file pwsafe.xsd, which is provided as part of the distribution. This file is used by Password Safe when XML data is imported, and should be provided to applications that wish to use the exported data. Note: The exported text is an unprotected copy of the specified password entries. Deleting this copy after use is not sufficient for making it inaccessible to a determined attacker and in effect bypasses the security of the program. Please DO NOT use this function unless you understand and accept the risks. The display of XML files is specified by pwsafe.xsl - an eXtensible Stylesheet Language file. A sample file, which may be modified for your own needs, is supplied as part of the distribution. This file is only an example and you can easily modify it to display whatever fields you want to show. As this only displays the data and will not alter it, you will still be able to import it into Password Safe at some later time. As in the Text Export option, you can control what entries and field to export to the XML file by selecting the \u0022Advanced field selection\u0022. This will display the following Wizard page: Selecting \u0022Advanced field selection\u0022 will display this Wizard page to allow you to export only some of the entries, based on the text in specified fields, and/or specify which fields are to be exported. Note: The XML schema requires the Title and Password fields, hence these cannot be deselected. See here for more details. Subsets of the database It is also possible to export a single entry or the members of a group to Plain Text, XML or to a current version of a Password Safe. In this case, right-click on the entry of group and select the form of output from the \u0022Export Entry To\u0022 or \u0022Export Group To\u0022 menu. For Text and XML export, the options available are exactly the same as exporting the complete database above. Lastly, if a filter is active, it is possible to export the entries that satisfy this filter to a current version of a Password Safe. This can also be found on the main \u0022Export To\u0022 menu off the File menu. Notes: When exporting only members of a group or the results of the current filter, if any of the included entries are aliases or shortcuts, then the associated base entries will also be exported even if it is not in the group or filtered results. This ensures that the resulting exported file is consistent. When exporting a single entry: If the entry is an alias, the password of the exported entry will be that of its base entry. If the entry is a shortcut, then only its base entry will be exported. "
},
{
  "filename": "Using_Password_Safe/Filtering_Entries/index.html",
  "title": "Filtering Entries",
  "text": " Filters Filters can be accessed via the View menu. A \u0022filter\u0022 is a criteria (or set of criteria) that an entry either matches or doesn\u0027t match. Password Safe allows you to define filters, and display only those entries that match a given filter. You can define a filter for a one-time query, or you can define several filters, naming them and store them persistently, for repeated use. Filters may be either stored along with the database, or externally, for sharing the same filter across several databases. Defining a Filter To define a new filter, select the \u0022View \u2192 Filter \u2192 New/Edit Filter\u0022 menu entry. The following dialog box will be displayed: As you can see, each Filter consists of one or more rows, where each row defines a criteria on a given field. The conditions defined in each row can be either \u0022and\u0022 or \u0022or\u0022 the condition defined in the previous row. This allows you to define the following kinds of filters: All entries with a username containing \u0022joe\u0022 or \u0022Joe\u0022 or \u0022JOE\u0022: All entries with a username \u0022Joe\u0022 (exactly) created after May 1st 2008 All entries with a username containing \u0022joe\u0022 or \u0022mary\u0022 As you can see, the filters can be arbitrarily complex. The columns in the Filter table are as follows: \u0027#\u0027 - This is the row number. It\u0027s displayed for convenience, and cannot be modified. \u0027?\u0027 - The checkbox in this column determines if the row is active or not. Only active rows are used when applying the filter. Clicking on the checkbox enables/disables the row. \u0027\u002B\u0027 - Click on this to insert a new row below a given row. \u0027-\u0027 - Click on this to delete the current row. Note: Since deleting a row is permanent, you might wish to disable it instead. \u0027And/Or\u0027 - This allows you to determine the relation of the rule you\u0027re adding to the previous rule. \u0027Field\u0027 - Select the entry field you\u0027re interested in, e.g., username, title, group, notes, etc. \u0027Criteria\u0027 - Define the value you\u0027re interested in for the selected field. Once you\u0027ve selected a field, clicking on this will bring up a dialog box allowing you to specify the criteria, which is the displayed in the table. Applying a Filter Once you\u0027ve defined a filter, clicking on \u0027Apply\u0027 will apply the filter on the entries in the database, while leaving the Set Filter dialog box open. This is useful for fixing and refining the filter based on the results. Clicking on \u0027OK\u0027 will also apply the filter, but will close the Set Filter dialog box. When a filter is active, the number of entries shown compared to the total number in the database is shown in the Status Bar and a small red and white box () appears in the far right of that bar. In addition, the displayed entries are shown in red. Managing Filters Set/Edit Filter is a good way to work with filters for a one-time task. If, however, you find that you have several filters that you wish to use repeatedly, then you can store them and manage them effectively via the \u0022View \u2192 Filter \u2192 Manage...\u0022 dialog box. The Manage Filters dialog box has two tables. The upper table lists the filters, and the lower table displays the contents of the currently selected filter. To add a new filter, click on New. This is equivalent to selecting the \u0022View \u2192 Filter \u2192 New/Edit Filter\u0022 menu entry. To edit an existing filter, select is and then click on Edit. To apply an existing filter, click on the Apply checkbox in the desired filter\u0027s row. Note that only one filter can be applied at a given time. Storing Filters Filters can be stored either as part of the current database, or externally, as XML files. Storing filters externally is a good way to share filters across databases, whereas storing them as part of the database ensures that potentially sensitive information in the filters\u0027 definitions is protected. To store filters in an external file: Set the Export checkbox of the filters you wish to store externally, then click on the Export button. To store filters in the current database: Set the Copy to DB checkbox, and then click on the Copy button. To load an externally stored filter: Click on the Import button. Note: Upon Startup, Password Safe searches for a file named autoload_filters.xml in the same directory as the pwsafe.cfg file (by default C:\\Users\\YourUsername\\AppData\\Local\\PasswordSafe). If such a file exists, then it is automatically imported and the filters it contains are ready for use. This is useful if you\u0027ve a set of filters that you wish to share across several databases, without having to explicitly import them each time. "
},
{
  "filename": "Using_Password_Safe/Command_Line_Arguments/index.html",
  "title": "Command Line Arguments",
  "text": " Command Line Arguments Invoking Password Safe with no arguments will cause the application to prompt you for the master password of the last database that was opened, or for the master password of a new database if none was previously opened on your machine (e.g., the first time you use Password Safe). It is, however, possible to modify this by invoking Password Safe as follows: pwsafe database This will open the specified database file, instead of the last one opened. If just a filename is given, without a path, it will be searched for in the directory in which the application was invoked. Note that if the filename and/or path has spaces, it should be enclosed in double quotes. pwsafe -r [database] This will open the specified database in read-only mode. If a database is not specified, then the application will prompt the user for a database, which will be opened in read-only mode. pwsafe -e filename This will prompt the user for a passphrase, and encrypt the file with a key derived from the passphrase. Note: The file can be any file. The encrypted file will have the same name as the original file, with \u0022.PSF\u0022 appended to it. pwsafe -d filename This will prompt the user for a passphrase, and decrypt the file with a key derived from the passphrase. Note: This will work only on files that were encrypted by invoking pwsafe with the \u0027-e\u0027 option (see above). pwsafe -c This will start the application closed, that is, with no database, and without the initial opening dialog (To access a database, use the File menu). pwsafe -s [database] This will start the application \u0022silently\u0022, that is, minimized and with no database (unless one is specified). When the application is restored, the user is presented with the opening dialog box (This option is meant for starting the application upon login, via a shortcut in the user\u0027s Startup folder). Note: This implicitly puts the application in the system tray. pwsafe -m This is the same as the \u0027-c\u0027 option, with the addition that the application is started as minimized. In addition, the following options are accepted and may be useful if you wish to share the same preferences across several machines, for example, when running Password Safe from a disk-on-key. -u username This will cause the application to read and write preferences under the specified username, instead of under the login name. -h hostname This will cause the application to read and write preferences under the specified hostname, instead of under the machine\u0027s name. -g config_file This will cause the specified file to be used for loading and storing preferences, instead of the default pwsafe.cfg. If just a filename is given, without a path, it will be searched for in the directory in which the application was invoked unless overridden by the PWS_PREFSDIR environment variable (see its description in the Preferences Section). Note that if the filename and/or path has spaces, it should be enclosed in double quotes. Note: As the configuration file uses XML, the username and hostname must satisfy the XML standards: The first character must be alphanumeric. If not, a \u0022u\u0022 will be prefixed to the username and a \u0022h\u0022 will be prefixed to the hostname as appropriate. They must only contain alphanumeric characters or one or more of the underscore, hyphen, colon or full stop characters (\u0022_-:.\u0022). If other characters are present, they will be replaced by the underscore (\u0022_\u0022). Finally, there are some special command line flags beginning with \u0022--\u0022. They are: --do-tall, --do-wide, --do-auto By default, Password Safe will check the screen dimensions and choose tall or wide versions of the larger dialog screens. Specifying --do-tall or --do-wide forces the choice, and --do-auto resets the system to use its internal logic. Note that this sets a preference, so it\u0027s enough to use this flag once on a given machine. --novalidate This will prevent Password Safe validating databases automatically when they are opened. Some validation is always required e.g. uniqueness of the entry\u0027s ID and the group/title/username combination. --allow-screen-capture As described in the Security Tab page, Password Safe by default hides itself from Windows\u0027 screen capture function (on Windows 10 Version 2004 and later). However, some programs, such as remote desktop viewers and screen readers for the visually impaired, rely on the screen capture capability to function. If you\u0027re using such programs on a regular basis, you can disable this by starting Password Safe with this command line flag. To protect against an adversary surreptitiously adding this flag, Password Safe displays a short notice when starting, informing you that the option has been set. In addition, the \u0022Capture Protection\u0022 indicator in the opening and main windows will be in red. This feature can also be silently disabled at installation/setup time, either by clearing the screen capture protection checkbox in the exe (NSIS) Choose Components window, or by passing SCREENCAPTUREPROTECTION=False as an argument to the msiexec command, e.g., msiexec /i \u003Cpwsafe_msi_path\u003E SCREENCAPTUREPROTECTION=False. When the feature is disabled this way, the status icon will be gray, with a tooltip indicating that the feature was disabled at setup. This is implemented via a registry key (HKLM\\Software\\Password Safe\\Admin\\ScreenCaptureProtection) that requires admin priviledge to write, but is readable by all users, specifically setting a value of zero to the key disables the feature. --testdump This allows testers to verify the mini-dump production when Password Safe has a problem to help developers resolve the issue. --cetreeview A new feature allows two entries to be selected and compared either via the Edit menu or by right-clicking on either. Selecting more than one entry is natively supported in the List view but not in the Tree view. This flag enables \u0022Compare Entries\u0022 in the Tree view via an extra dialog to select the \u0022other\u0022 entry. Supporting multiple selection in the Tree view is under development. Once supported, this flag will be ignored. "
},
{
  "filename": "Password_Safe_Menus/index.html",
  "title": "Password Safe Menus",
  "text": "Password Safe Menus "
},
{
  "filename": "Password_Safe_Menus/File_Menu/index.html",
  "title": "File Menu",
  "text": " File Menu The File Menu contains options related to managing and creating new Password Safe databases. New Create a new blank password safe database. Open Open an existing password safe database. When presented with the Open dialog, you may specify to open an existing database in Read/Write of Read-Only mode. After opening, the current status will be shown in the Status Bar at the bottom of the Password Safe window. At any time after this, the user may double-click on that part of the Status Bar to switch between these two modes or use a menu item on the \u0022File\u0022 menu. It may not be possible to switch a database to Read-Write mode if another user currently has the database open in Read/Write mode. You may also use the change mode menu item further down this menu to switch modes instead of double-clicking on the Status Bar. Close Closes the currently open password safe database without exiting the application. Lock Depending on whether the user has enable the use of the System Tray, this locks the currently open password safe database either to the Task Bar (left-click to show dialog to unlock) or into the System Tray (right-click to show the context menu where you can restore the database or just unlock it). The Master Passphrase will be required to reopen/unlock the database. The Lock button can also be placed on the Toolbar using the Toolbar Customization (right-click on the Toolbar). Recent This section of the file menu may list the recently opened database files. This section will be blank if this is the first time Password Safe has been used. Notes: The list of recently opened files may be cleared by selecting \u0022Clear Recent Safe List\u0022 The number of recent files that Password Safe will keep may be configured via the \u0022Manage \u2192 Options \u2192 System\u0022 tab, where you may also configure if you prefer to see the recent files in the File menu, or as a submenu. Save Save any changes to the current safe. If no changes have been made since the previous save, or if the database was opened read-only, this choice will be greyed-out. Save As Save a copy of the current safe under a new name or location. Export To Export the contents of the current database to an external file in either an old Password Safe database format, XML, or as text. If a filter is active, you can export those satisfying the filter conditions to a Password Safe database in the current format. In this case, if an alias or shortcut is included in the filter results, its base entry will also be exported even if it does not satisfy those conditons. See here for more information on exporting the database to other formats. Import From Import the contents of a previously exported or correctly formatted text file, XML, or a KeePass V1 password database into the current database. See here for more information on importing text files. Merge Merge a Password Safe database or backup file (.bak) into the current database. Disabled in read-only mode. You may also select Advanced Merge Options in order to restrict which entries are merged into your current database. To select a subset of entries to merge, select a field, comparison mode, and enter the text to be compared. Compare Compare the currently opened database with another. Compare uses a Wizard interface. You may also select the Advanced field selection in order to restrict which entries and which fields of these entries you compare between the two databases. See here for more information when the results are displayed. Synchronize Synchronize the currently opened database with another. The main difference between Merge and Synchronize is that during a Merge, all elements of the merging database will be taken to the currently opened database. During synchronizing however, only elements in the currently opened database will be updated. Synchronize uses a Wizard interface. You may also select the Advanced field selection in order to restrict which entries and which fields of these entries you synchronize between the two databases. Change to R-O / Change to R/W A database that\u0027s open for reading and writing (the default) can be protected against unintended changes by selecting the Change to R-O entry. Likewise, a read-only database can be modified after clicking on Change to R/W. When changing to read-write, you will be prompted for the master password. You can also switch between these modes by double-clicking on the R/W / R-O text in the status bar on the bottom of the application\u0027s window. Note: The Merge, Compare and Synchronize operations may take a long time, especially for large databases. Properties Display information about the currently opened password safe database, such as: format version, number of groups, number of entries, and information about when it was last saved and by whom. Exit Closes the Password Safe program. If changes were made to the database since the last save, you will be prompted to save the database. Reports Note: Compare, Export, Import, Merge and Synchronize all produce a report that can be viewed in a dialog and then copied to the clipboard or saved to disk as a text file in the same directory as the database. The \u0022View \u2192 Reports\u0022menu item may then be used to view the reports at a later date. The name of the report file is fixed and dependent on the function that created it. If the same function is repeated and its report saved to disk, any existing report for this function will be overwritten. Note: The report may contain sensitive data and care should be taken when selecting the \u0022save to disk\u0022 option. "
},
{
  "filename": "Password_Safe_Menus/Edit_Menu/index.html",
  "title": "Edit Menu",
  "text": " Edit Menu Entry Shortcut Group Through the Edit Menu you can add, edit, use and organize user names and passwords. Note that the contents of this menu change according to what\u0027s selected in the main view (e.g., if you\u0027ve selected an entry or a group). Also, some items may be disabled, as noted below. Add Entry Add a new user name and password. This is disabled if the database is opened read-only.See User Names, Passwords, and Groups for more information. Edit Entry / Expand/Collapse Group When an entry is selected, Edit the selected user name and password. When a Group is selected (in Tree view), this will expand or collapse the display of entries under the selected group. Editing an entry is disabled if the database is opened read-only.See User Names, Passwords, and Groups for more information. Delete Entry / Delete Group When an entry is selected, this will delete it. When a Group is selected (in Tree view), this will delete all entries under the selected group. Confirmation is requested if there is more than one entry in the selected group. This is disabled if the database is opened read-only. Rename Entry / Rename Group Rename the selected entry (or group, in Tree view). This is disabled if the database is opened read-only. Find Entry Find an entry containing a given text. By default, all fields except the Password field are searched.See Searching for more information. Duplicate Entry Duplicates the selected entry. This is disabled if the database is opened read-only. Add Group Create a new password group (e.g., Banking Passwords). This is disabled if the database is opened read-only. Undo The last action will be reversed. Repeating Undo will undo the actions in reverse order, from last to earliest. Redo The last undone action(s) will be executed again. Clear Clipboard Clear the clipboard\u0027s memory. This clears the clipboard of anything that was pasted there by Password Safe (password, username, notes, etc.). If the current contents of the clipboard did not come from Password Safe, then this will have no effect. Copy User Name to Clipboard Copy current selection\u0027s user name to the clipboard. Copy Password to Clipboard Copy the current selection\u0027s password to the clipboard. Display subset of Password This action displays a window that allows you to specify which characters of a password to display. This is useful for sites that ask for parts of a password to login. For example, a password might be \u0022qAdm3ddENc\u0022, and you might be asked to enter the first, third, fifth and eighth letters. This window allows you to do this in a convenient manner: In the upper field you enter the positions of the password characters you want for the subset of the password. You can use spaces, commas or semi-colons to separate the positions. The corresponding characters of the password are shown in the lower field. To quit, please use the Esc key. Copy Auth Code to Clipboard If an Authenticator Secret was defined for the currently selected entry, then this action is displayed. Clicking on it will cause the current 6 digit authenticator code to be copied to the clipboard. The clipboard will be updated when the authenticator code changes. Display Auth code If an Authenticator Secret was defined for the currently selected entry, then this action is displayed. Clicking on it will bring up a window displaying the current Authentication Code, as well as an animated button indicating the time that the code will remain current. Clicking on the button will copy the code to the clipboard. Copy Notes to Clipboard Copy the contents of current selection\u0027s notes field to the clipboard. Copy URL to Clipboard Copy the current selection\u0027s URL field to the clipboard. Copy email to Clipboard Copy the current selection\u0027s email field to the clipboard. Copy Run Command to Clipboard Copy the current selection\u0027s Run Command field to the clipboard. Note: Variables will be substituted by their values unless the Ctrl key is pressed down when selecting this menu item. Browse to URL When an entry is selected, and the entry has a URL associated with it, then this will invoke the default browser to the URL. If no entry is selected, or the selected entry\u0027s URL is blank, this command will be disabled. Unless changed via the \u0022Manage \u2192 Options \u2192 Security\u0022 tab, the entry\u0027s password will automatically be copied into the Clipboard. Browse to URL \u002B AutoType When an entry is selected, and the entry has a URL associated with it, then this will invoke the default browser to the URL. If no entry is selected, or the selected entry\u0027s URL is blank, this command will be disabled. Automatically input user name and password into the selected input field.See Using AutoType for more information. Send email Prepare an email to be sent with the data in the current selection\u0027s email field. Please ensure that you have an email client installed on your computer.See User Names, Passwords, and Groups for more information. Perform AutoType Automatically input user name and password into the selected input field.See Using AutoType for more information. Run Command This will execute the command in the field Run Cmd of the selected entry.See Using Run Command for more information. Create Shortcut When an entry is selected, this allows you to create a reference to the entry, typically in another group. This is useful if you have an entry that \u0022belongs\u0022 under more than one group, but you don\u0027t wish to duplicate data. A shortcut has a distinct icon associated with it, , and by default has the name \u0022shortcut to x\u0022, where x is the title of the original entry. Of course, you can edit the name, move or delete the shortcut, just like a regular entry. Go to Base entry This item will only appear for a shortcut or alias entry. After clicking Go to Base entry the corresponding base entry will be selected. Edit Base entry This item will only appear for a shortcut or alias entry. After clicking Edit Base entry you can edit the corresponding base entry to this shortcut or alias. Export Entry or Group Plain Text The selected entry or all entries within the selected group will be exported as plain text. Before exporting, you will be asked to input the Master Passphrase as confirmation that you intend to export data from the database into an unencrypted text file. XML format The selected entry or all entries within the selected group will be exported in XML format. Before exporting, you will be asked to input the Master Passphrase as confirmation that you intend to export data from the database into an unencrypted XML file. Password Safe Format The selected entry or all entries within the selected group will be exported as a new Password Safe database. Before exporting, you will be asked to input the Master Passphrase as confirmation that you intend to export data from the database into another Password Safe database. You will also be required to provide a new passphrase for the new Password Safe database. See also Exporting Entries for more information. Protect entry / Protect All Entries The selected entry or group of entries will be protected. A protected entry cannot be modified until it is unprotected. Protected entries are marked with a padlock icon or \u0027#\u0027. Right mouse click actions All functions in the Edit menu can also be reached by clicking the right mouse button on the corresponding entry, alias or group. In addtion, when right clicking on an alias or shortcut base entry, there is an extra submenu (\u0022Go to Aliases...\u0022 and \u0022Go to Shortcuts...\u0022) to allow easy access to their respective dependants, i.e. aliases or shortcuts. Although, all dependants will be on the new submenu, some may be disabled if, for example, a filter is active and the entry is not visible or if there are more than the maximum of 25 dependants that can be referenced by this function. Entry Alias Base Entry Shortcut Base Entry Alias Group All functionality is described in the previous section. "
},
{
  "filename": "Password_Safe_Menus/View_Menu/index.html",
  "title": "View Menu",
  "text": " View Menu The View Menu controls the available display options. You can switch between how your entries are shown: either as a single list (Flattened List) or organized by category (Nested Tree). You can choose whether or not to display a toolbar, and if so, whether to use the \u0027Classic\u0027 or \u0027New\u0027 toolbar icons. The toolbar itself is also customizable. You can also expand or collapse all the groups displayed in the Nested Tree view, display subsets of the entries, filter the entries displayed to match any criteria, select the font in which the entries are displayed and display reports of merge, compare, import and other advanced operations. Switching Between Nested Tree and Flattened List Views Go to the View menu Select Nested Tree or Flattened List Customizing the Flattened List View You can control what information is displayed in this view and in what manner as follows: Column width adjustment Fit: Hover over right boundary so pointer changes to resize cursor. Double-click. Resize: Hover cursor over right boundary, left-click drag. Not all columns can be resized this way. Sort Left-click on a heading sorts by that columns values in ascending order. Subsequent clicks on same heading toggles between descending and ascending Column Picker Right-click on the header row in order to access Column Picker or Reset Columns options: To add a column, drag its name from the Column Picker, and drop it on a column heading to add to its left (except Icon, which always appears at the far left) To remove a column, drag its heading onto the Column Picker and release. (Title and User Name cannot be removed) To reorder, drag, and drop when a boundary is highlighted blue. If no highlighting appears, repositioning is not possible. Reset Columns: First use removes added columns, replaces removed columns, resets order. A second reset properly resets widths. Controlling the Toolbars To display or hide the toolbar, check or uncheck the Toolbar Visible menu item. To use \u0022new\u0022 or \u0022classic\u0022 toolbar icons, select the \u0022New Toolbar\u0022 or \u0022Classic Toolbar\u0022 menu item, respectively. Dragbar The \u0022Dragbar\u0022 is a special toolbar that allows you to paste parts of the currently selected entry by \u0022dragging\u0022 the icon specifying the part you want to paste to where you want it to be pasted to. For example, to paste the \u0022Notes\u0022 text of a given entry to another application using the Dragbar, select the entry, and then drag the \u0022N\u0022 icon from the Dragbar to the application. When you release the left mouse button, the contents of the Notes field will be pasted to the application. The Dragbar will disable (\u0022grey out\u0022) icons for fields that are empty in the selected entry. The \u0027AutoType\u0027 Dragbar button behaves in a slightly different manner: Dragging it to an input area on another Window (e.g. Browser) will cause Password Safe to begin AutoType from there. Notes: There appears to be an issue using the new AutoType Dragbar image with Internet Explorer (tested with V7, V8 \u0026 V9) in that any characters typed before the first tab character are lost. This does NOT occur with Firefox and Chrome browsers. Although we have a solution for this (we send a Tab followed by a Shift\u002BTab to return to the selected window only when using this Dragbar AutoType image), the side-effect is that you can only use the Dragbar AutoType image to replace any existing string in that window by the expanded AutoType string. If dropped in a window of another application the result will depend on how that application processes the Tab and Shift\u002BTab characters. If the control key is pressed while clicking on a Dragbar icon, the relevant text is copied to the clipboard in addition to being pasted when the mouse button is released. This can be useful in cases where the drop \u0022missed\u0022 by a pixel or two, allowing you to perform a paste operation, rather than trying to drag again. To display or hide the Dragbar, check or uncheck the Dragbar Visible menu item. Expand All Expands all groups, making all entries visible (Nested Tree view only). Collapse All Collapses all groups (Nested Tree view only). Subviews \u0022Subviews\u0022 are predefined filters that when selected, show only the entries that match their criteria. As all filters, they can be cleared by double-clicking the red and white striped \u0022filter active\u0022 indicator at the bottom right of the Status Bar, as can be seen in the following images where the filter is active. 1. Unsaved changes If item Save database immediately after Edit or Add in menu Manage \u2192 Options \u2192 Backups is unchecked, changed item will not be saved immediately, but they will be shown in a different colour. See the next picture: Overview of all entries: By checking this item, only changed and unsaved items will be shown. If this filter is active and you save your database changes, it will be cancelled and the full database will be displayed. Overview of all changed entries: Note: As long as there are some unsaved items, there will be a \u0022*\u0022 in the status area at the bottom of the application\u0027s window. 2. Expiry dates If you select this menu item, only entries with a defined expiry date will be shown in the list. It does not matter that the expiry date is in the past or future. If there aren\u0027t any entries with expiry date, this menu item will be grayed out. 3. Last Find results If you select this menu item, only entries that were found during the last Find operation will be shown. If a Find hadn\u0027t been performed or it had been cleared, then this menu item will be grayed out. If the Find Toolbar was visible when this filter was activated, it will be closed, since no new Finds can be performed whilst this filter is active. Find Next (F3) and Find Previous (Shift-F3) will still be available. Note: If this filter is active, as it is based on displaying entries in the database found during the last Find operation and only these, i.e. the Find operation is not redone should the database be changed. For example: If an entry is edited so that it no longer satisfies the previous Find, it will still be displayed. If an entry is duplicated, the new copy will not be included in the display. If an entry is deleted, it will be removed from the display. If the above deleted entry is reinstated, i.e. via Undo (Ctrl-Z), the entry will again be displayed. If new entries are added either directly or, say, via Merge, these will also not be displayed as they were not in the database when the last Find operation was performed. User defined Filters A \u0022filter\u0022 is a criteria (or set of criteria) that an entry either matches or doesn\u0027t match. Password Safe allows you to define filters and display only those entries that match a given filter. For more information on defining and using filters, see here. Change Font Select a different font for displaying entries in the List or Tree views, and for displaying passwords in the Add and Edit Entry dialog boxes. You can also specify the font to use in the Virtual Keyboard. Note that this font must be able to display Unicode characters. Supported fonts include: \u0022Arial Unicode MS\u0022 (which comes with Microsoft\u0027s Office suite), \u0022Arial Unicode\u0022 and \u0022Lucida Sans Unicode\u0022, although you may select another using the appropriate menu item. Reports If you save the results of Compare, Export, Find, Import, Merge, Synchronize and Validate operations to disk, they are stored in the same directory as the database. If you repeat one of these operations and again save the report to disk, it will overwrite any previous report for this operation without requesting permission. You may view these reports at a later date when you open a database in this same directory. Refresh F5 Refreshes the display either by pressing the F5 key or clicking on this menu item. "
},
{
  "filename": "Password_Safe_Menus/Manage_Menu/index.html",
  "title": "Manage Menu",
  "text": " Manage Menu The Manage Menu is where all of Password Safe\u0027s options and settings are controlled. Change Master Password... Selecting this option brings up the Change Master Password dialog. See Changing Master Passwords for more information. Make Backup Create a backup copy of the current password database. See Backing Up and Restoring Databases for more information. Restore from Backup... Restore a backed up password database file. See Backing Up and Restoring Databases for more information. Options... Selecting Options... brings up a tabbed dialog where many of Password Safe\u0027s settings can be viewed and edited. To learn more about a specific tab select it below:Backups Tab Display Tab Misc Tab Password History Tab Security Tab Shortcuts Tab System Tab Note: Many of the setting are stored as preferences, as described here. Password Policies... This allows you to manage both the database default password policy and named password policies. You may create up to 255 named password policies. The name of a password policy can be at most 255 characters long. Customize Main Toolbar This allows you to select which commands appear on the toolbar, and in which order. Generate Password This allows you to generate a password with a specified password policy to be put into the clipboard, by pushing Generate. The password in the clipboard can then be used by some other application. You may select the database default password policy, a named password policy or use a specific policy you enter into dialog. Yubikey This allows you to customize your optional YubiKey device so that you can use it to access your Password Safe database, as well as creating a backup YubiKey in case the original get lost or damaged. To customize your YubiKey Insert your YubiKey into your PC\u0027s USB slot Select the Manage-\u003EYubikey... menu item. The YubiKey Configuration dialog box will appear. Your YubiKey\u0027s Serial Number should be displayed. If this field is blank, make sure your YubiKey is plugged in correctly. Click on the Generate button. This will create a 20 byte random secret key that will be written to your YubiKey, and used to access your database. Click on Set Yubikey. This will write the generated key to your YubiKey, and save the data in encrypted form in your Password Safe database, so that you can use it to configure a backup key. If the configuration is successful, then the dialog box will close. If not, then an error message will appear describing the problem. Click on Close to exit the dialog box. Note: After configuring your YubiKey, you must change the database\u0027s password to use the YubiKey for authentication as described in Changing Master Passwords To create a backup YubiKey Insert your backup YubiKey into your PC\u0027s USB slot Select the Manage-\u003EYubikey... menu item. The YubiKey Configuration dialog box will appear. Your backup YubiKey\u0027s Serial Number should be displayed. If this field is blank, make sure your YubiKey is plugged in correctly. Do not click on the Generate button. The data displayed in the \u0022YubiKey Secret Key\u0022 field is the key associated with this database. This is the key that will be written to your backup YubiKey. Click on Set Yubikey. This will write the generated key to your backup YubiKey. If the configuration is successful, then the dialog box will close. If not, then an error message will appear describing the problem. Click on Close to exit the dialog box. Change Language If you have installed all the currently available additional language DLLs when Password Safe was installed (which is the default), you will have the ability to switch between these languages on-the-fly via this menu item. After changing the language, all menus, dialogs and messages will now be in your chosen language. "
},
{
  "filename": "Password_Safe_Menus/Help_Menu/index.html",
  "title": "Help Menu",
  "text": " Help Menu The Help Menu provides access to miscellaneous resources on and about Password Safe. Get Help (F1) Open this help file. Visit Password Safe Website... Open the Password Safe home page in a browser. About Password Safe This option opens a dialog box showing the version number and copyright notice, as well as letting you check if there\u0027s a newer version of Password Safe available. Note that for security, Password Safe will close your database before connecting to the Internet to check for a newer version. "
},
{
  "filename": "Password_Safe_Menus/Menu_Toolbar/index.html",
  "title": "Menu Toolbar",
  "text": " Menu Toolbar There are two different views available for toolbar icons: new and classic. Each of the icons visible on the toolbar provides pop up tips. Simply hover your mouse pointer over the icon and a small tip will appear. For convenience, this topic provides a quick reference for each of the icons. Note that (as of version 3.11) you can customize which icons appear in the toolbar and the order in which they appear. Switching Between Menu Icon Views Go the View menu Select Classic Toolbar or New Toolbar Icon List Classic New Default Description X Creates a new safe to input passwords X Opens a dialog to open and switch to another safe X Closes the current safe Locks the current safe X Saves any changes made to the current safe Saves any changes made to another safe X Copies the selected entry\u0027s password to the Clipboard X Copies the selected entry\u0027s user name to the Clipboard X Copies the selected entry\u0027s authentication code to the Clipboard X Display the selected entry\u0027s authentication code X Copies the selected entry\u0027s notes to the Clipboard X Erases the Clipboard X Performs AutoType for selected entry X Browse to entry\u0027s URL field Browse to entry\u0027s URL field and execute AutoType X Adds a new user ID and password entry to the open safe X Opens the currently selected password entry for editing X Deletes the currently selected safe entry Toggle between List and Tree views X Collapse all open groups (Tree view) X Expand all groups (Tree view) Compare the current safe with another Merge the current safe with another Export data to a text file Export data to an XML file Import data to a text file Import data to an XML file View reports of import and merge operations X Configure options X Opens this help file Runs the command Display a subset of the password Manage filter Edits filter Clear and set filter Displays the Find bar Send an email Synchronizes the current safe with another \u0027Undo\u0027 the last action \u0027Redo\u0027 the last \u0027undone\u0027 action Manage the password policy "
},
{
  "filename": "Password_Safe_Menus/System_Tray/index.html",
  "title": "System Tray",
  "text": " System Tray No database open Locked database Unlocked database The System Tray context menu gives quick access to recently used entries (if the database is unlocked) and to unlock the database if locked. You can also use it to minimize the main PasswordSafe window and restore it if already minimized but not locked. Set Database ID If you regularly keep several databases open, you may set a unique temporary ID (a number between 1 and 99) that will be superimposed on top of the System Tray icon. Setting an ID of zero will remove the number from the image. An ID is reserved once assigned to an open database but will be free to be used again either when a new ID is assigned or the database is closed. In addition, the System Tray tooltip shows the ID before the database name. Notes: The ID is only a visual indicator. PasswordSafe doesn\u0027t store or use this in any way. An ID can only be assigned to an opened database. When the database is closed, the ID is free to be assigned to another open database. The same ID can\u0027t be assigned to two open databases at the same time. The ID can only be changed when the database is unlocked. The association of an ID to a particular database is not persistent (remembered), that is, you need to reassign it each time the database is opened (if needed, of course). Since the color of the Windows Taskbar and Notification Area varies across versions of Windows, you can set the color of the text for the best contrast on your system. If the database is locked, the database name will be shown in the tooltip between square brackets as shown below. Open Another This allows you to select another database to be opened instead of the one currently open (or locked) in the current instance of the program. This is handy if you want to switch between databases without starting another instance of the program. "
},
{
  "filename": "Options/index.html",
  "title": "Options",
  "text": "Options "
},
{
  "filename": "Options/Backup_Options/index.html",
  "title": "Backup Options",
  "text": " Backups Tab The Backups Tab allows you to configure how automatic backups are created and managed. Save database immediately after any change When checked, the database will be saved if there is any change e.g., add, delete, duplicate, edit or rename of an entry or group as well as if any entries/groups are added/moved via import or Drag \u0026 Drop. When this is used, enabling \u0022Create intermediate backups\u0022 is recommended, as this helps protect against disk problems. Note that changes made via the Compare database results dialog will not cause a database save for each action, but only after the compare results dialog has been closed. Create intermediate backups (.ibak) before saving When checked, Password Safe will copy the database before each save. The names and location of the backup copies are defined in the following fields, as well as how many previous copies will be kept. Backup Name The names of the backup files consist of Base (by default, the name of the database without the .psafe3 extension), and Suffix (none, a running count, or the date/time of the backup). Here you can configure what the backups will be named, and how many will be saved. Password Safe will automatically erase the oldest databases beyond the number of backups that you specified. Note that Password Safe will only erase old databases if the suffix is an incremented number (running count). Backup Directory By default, Password Safe will store the backups in the same directory as the currently open database. In this field you can specify an alternate location, such as a special backup directory, network drive, disk-on-key, etc. Of course, you must have write permission to the location you specify. You may also use environment variables in defining the alternate location for example: \u0022%homedrive%%homepath%\\Documents\\PWS Backups\\\u0022. If you use these variables, the expanded path will be shown underneath once you navigate to a different control on this tab. "
},
{
  "filename": "Options/Display_Options/index.html",
  "title": "Display Options",
  "text": " Display Tab Functions within the Display Tab control how Password Safe and password items are displayed. Always keep Password Safe on top If checked, maximized Password Safe will always be the top most window displayed in the monitor, regardless of what other window may have focus. Show Username in Tree View If checked, usernames will be displayed in square brackets following the item\u0027s name in the Nested Tree view. Show Password in Tree View If checked, passwords will be displayed in curly braces following the user\u0027s name in the Nested Tree view. However, this option is strongly discouraged in environments where passers-by can view the monitor. Show Notes as ToolTips in Tree \u0026 List Views If checked, notes to an hovered item will be shown. Show password in Add \u0026 Edit If checked, passwords that would be hidden in the Add Entry and Edit/View Entry dialogs will be visible by default. You can display or hide the password for a specific entry by clicking on the \u0022Show/Hide\u0022 button in the dialog. Show Notes in Edit If checked, notes will be displayed by default in edit dialog. If not, you will need to click on the Notes field in order to view the text there. Word Wrap Notes in Add \u0026 Edit If checked, the words will automatically be wrapped in the window, without an horizontal scroll bar. If not checked, an horizontal scroll bar will appear, if necessary. Show Grid Lines in List View If checked, a light grid line will be shown in the display list, making it look like a spreadsheet. Put Groups first in Tree View By default, your entries are displayed in strict alphabetical order in the tree view. When this option is selected, all the groups will be displayed first (in alphabetical order), followed by all top-level entries. Highlight changed entries As long as entries are not saved, they will be shown highlighted. If you checked \u0022Save database immediately after Edit or Add\u0022 in the Backup tab, entries will never be highlighted, because they get saved immediately. Warn N days before password expires If checked, Password Safe will scan all entries when reading a database (typically when starting up), and display a list of the whose expiration date is N days or less from the current date. Initial tree view This determines how your entries will be displayed in the tree view when you open the database. Window Transparency The default is disabled. Onced enabled, Password Safe must be restarted for it to take effect and for a value to be set. If enabled, the value specified is the percentage of Window transparency. 0% means normal fully opaque and 100% is totally transparent and invisible. Values greater than 50% are not supported. Note: This only applies to the main dialog window. All other dialogs, message boxes and menus will always be fully opaque. It is suggested that a value between 20% and 40% may be most beneficial. "
},
{
  "filename": "Options/Misc__Options/index.html",
  "title": "Misc. Options",
  "text": " Misc Tab Various miscellaneous program defaults are displayed in the Misc Tab. Confirm deletion of items When checked, a user prompt requesting confirmation will be displayed every time you try to delete a password entry. Record last access times When checked, Password Safe records the time each entry was accessed (e.g., when the password was copied, or when the entry\u0027s details were viewed, etc.). The time is stored with the entry, and may be viewed in the entry\u0027s dialog box.Notes: When this is enabled, the database will be modified even when no entry was edited. This means you may be prompted to save the database upon exit, even though you didn\u0027t explicitly change anything. When the database is opened in read-only mode, access times are not updated. Escape key closes application When checked, Esc can be used to close Password Safe when the program is maximized. Note that if the System Tray is enabled (via the Put Icon in System Tray option), then Esc just closes the main window, which can be re-opened by double-clicking on the icon in the System Tray. Double click action This allows you to define what action Password Safe will take when you double-click on an entry. The default is to copy the entry\u0027s password to the clipboard. The available actions are: AutoType Browse to URL Browse to URL \u002B AutoType Copy notes to clipboard Copy password to clipboard Copy password to clipboard, minimize Copy username to clipboard Run Command Send email View/Edit selected entry Note that last item, copy password and then minimize, won\u0027t work as expected if the \u0022Clear clipboard on minimize\u0022 option is selected in the Security Options tab. AutoType Minimize after AutoType By default, Password Safe minimizes when autotyping. If this checkbox is cleared, Password Safe will move \u0022behind\u0022 all displayed windows instead. Default AutoType String Here you can specify the AutoType string to use by default for all entries. Note that you can override this on a per-entry basis. This option is useful, for example, if you wish to change the delays for all entries. See here for more details on AutoType. Default AutoType Delay This is the amount of time, in milli-seconds, that PasswordSafe waits between characters when performing the autotype. The default, 10mS, should be fine for most systems. You may want to decrease it (make it faster) if you\u0027ve a fast PC, or increase it (slow it down) for an older machine. In any case, you can also change this per-entry, as described here. Default Username This allows you to set a default user name that will be used automatically every time a new password entry is generated. when checked, the name entered will be inserted into new entries\u0027 user name field as the default. Of course, you can edit it if needed. Alternate Browser The browser you specify in this field will be used when using the \u0022Browse To URL\u0022 function for a selected entry, when the entry\u0027s URL has \u0022[alt]\u0022 before the URL, e.g., \u0022[alt]http://www.foo.net\u0022. This is useful, for example, if your default browser is Firefox, and you wish to access a website that works best with Internet Explorer, in which case you should specify the Internet Explorer as your alternate browser (typically \u0022C:\\Program Files\\Internet Explorer\\iexplorer.exe). You can specify command line options to the browser via the Browser command line parameters field. Do not enclose this value in single or double quotes unless your chosen browser requires them. External Editor The external editor you specify in this field will be used when right clicking on an entry\u0027s Notes field and selecting to edit the field using an external editor. For more information, see \u0022User Names, Passwords, and Groups: Notes\u0022. You can specify command line options to the external editor via the external editor command line parameters field. Do not enclose this value in single or double quotes unless your chosen external editor requires them. "
},
{
  "filename": "Options/Password_History_Options/index.html",
  "title": "Password History Options",
  "text": " Managing the Password History When you change an entry\u0027s password, Password Safe can record the previous passwords associated with the entry. This can be useful, for example, if the change failed to take effect at the site associated with this entry. This option specifies if recent passwords are stored by default for new entries. You can always override this for a given entry in the Add Entry or Edit/View Entry dialog boxes. Save N previous passwords per entry Selecting this checkbox and setting the corresponding value defines the default password retention for new entries. Manage password history of current entries This section allows you to modify the password history tracking of existing entries, as follows: No change - Don\u0027t apply the change to existing entries. Stop saving previous passwords - This is the equivalent of clearing the \u0022Keep N lastpasswords\u0022 checkbox in all the entries in the database. Note that no history will be lost, only no further password changes will be tracked until history saving is re-activated. Start saving previous passwords - This is the equivalent of setting the \u0022Keep N last passwords\u0022 checkbox in all the entries in the database. Entries with no history will save up to the above number of passwords. Entries with password history will track changes, but the number of entries tracked will not change. Set maximum number of password saved to above value - All entries will save up to the above number of passwords. However, no history will be lost if an entry has more than this number of entries stored. Clear password history for ALL entries "
},
{
  "filename": "Options/Password_Policy_Options/index.html",
  "title": "Password Policy Options",
  "text": " Setting a Password Policy A password policy describes the rules that are used to create a password - the letters, letter cases, length, and any special characters that are required. Some institutions require only lower case characters while others will demand that an upper case character, number, and special character be used, as well as a specified minimum length. In general, it is a good idea to use the longest allowable length and the largest permitted mix of characters. Please verify the exact password requirements with the entities that require them. It is now possible to select the default symbol list that will be used in a database via the \u0022Manage \u2192 Password Policies...\u0022 dialog. In addition, each entry can have its own symbol list specified via the Add or Edit entry dialogs. Note: these symbol lists are not used for either pronounceable or easy-to-read passwords. The Manage Password Policies dialog allows you to set the global password generation policy as well as Named Password Policies. All these are saved in database header and so are database specific. This policy can be overridden temporarily and passwords manually edited at any time in the Edit/View Entry dialog. Selecting Password Rules Each \u0022use\u0022 item (e.g., use digits, use symbols, etc.) checked in the dialog forces Password Safe to include the specified characters in the passwords it generates. Each password will also be generated to the specified length (no shorter, no longer). The only exception to this is the Use hexadecimal digits only check box. When checked, passwords will include those characters that represent hexadecimal digits only. Selecting this option disables all other check boxes. Selecting Generate pronounceable passwords will cause Password Safe to generate a \u0022nonsense\u0022 word that should be pronounceable, such as \u0022ingstria\u0022, \u0022ringsony\u0022, etc. This is useful when you need a password that is both secure and relatively easy to remember without Password Safe. Choosing this option with use digits and/or use symbols will enable replacing some letters with their \u0022leet\u0022 equivalent, e.g., \u0022E\u0022 may be replaced by \u00223\u0022, \u0022S\u0022 by \u00225\u0022, etc. The characters that are added when use symbols is checked are: \u002B - = _ @ # $ % ^ \u0026 ; : , . \u003C \u003E / ~ \\ [ ] ( ) { } ? ! | unless use only easy-to-read characters is selected as well, in which case the characters are only: \u002B - = _ @ # $ % ^ \u0026 \u003C \u003E / ~ \\ ? The letters used when use only easy-to-read characters is checked are: a b c d e f g h i j k m n o p q r s t u v w x y z and A B C D E F G H J K L M N P Q R T U V W X Y, and the digits are limited to 3 4 6 7 8 9. "
},
{
  "filename": "Options/Security_Options/index.html",
  "title": "Security Options",
  "text": " Security Tab The Security Tab provides access to user controlled security settings. Clear clipboard upon minimize When checked, the program clears clipboard contents of any stored data (such as a password) when the application is minimized. This prevents anyone else or any other program from reading the contents of the clipboard. Note that selecting this option with the \u0022Copy password to clipboard, and then immediately minimize\u0022 double click action in the Misc Options tab will lead to unexpected results (the password will be copied, but immediately cleared). Clear clipboard upon exit When checked, the program clears clipboard contents of any stored data (such as a password) when the interface is minimized or closed. This prevents anyone else or any other program from reading the contents of the clipboard. Exclude from clipboard history When checked (default), items that Password Safe place on the clipboard (such as passwords) are not include in the clipboard history, in systems where this feature is supported (Windows 10 and later). By unchecking this, you\u0027re potentially exposing your passwords to anyone who can access your clipboard history. Confirm item copy to clipboard When checked, a prompt is displayed requesting user confirmation every time a password is copied from the database to the clipboard. \u0027Browse to URL\u0027 copies password to clipboard It\u0027s useful to have the password ready for pasting when browsing to a website\u0027s login page. However, this can be considered a security risk, since you didn\u0027t explicitly copy the password. If you check this, the relevant password will be copied to your clipboard when browsing to the URL specified in the entry. Exclude from screen capture One possible security risk is someone surreptitiously capturing your screen when Password Safe is open. Even if you don\u0027t have a password displayed, the other information in an entry or the main window can be of use to an attacker. Starting with version 3.64, Password Safe protects against this by hiding the application from Windows\u0027 screen capture feature. If you wish to disable this feature, e.g., for taking a screenshot to report a problem, you can do so by clearing this checkbox. Notes This feature is only supported on Windows 10 Version 2004 and later. Some programs, such as remote desktop viewers and screen readers for the visually impaired, rely on the screen capture capability to function. If you\u0027re using such programs on a regular basis, you might want to disable this. See also the Command Line Arguments page. When enabled, a small green icon is displayed in the main window\u0027s status bar, and in the master password entry dialog. When disabled, the icon will be displayed in yellow. When overridden by the command line argument, the icon will be displayed in red. Database locking When the database is locked due to one of the events below, the database is saved, and then all its data is cleared from memory. However, the undo/redo log is retained so that changes can be undone (or redone) after unlocking. Note: all entry information in these commands remain encrypted in memory. Lock password database on minimized When checked, the program locks the password database when the application is minimized. When maximized again for use, a password is required to access the database. Lock password database on workstation lock Checking this causes the password database to lock when the workstation is locked preventing unauthorized access by users that may have access to the workstation. Lock password database after... Checking this option and setting a time causes Password Safe to lock the password database after the set interval has passed without user actions in the application. Unlock Difficulty The setting of the slider determines how much processing is required to open and save a Password Safe database. The Standard setting should provide sufficient security without delaying the opening of a database significantly on most platforms. When increasing this value, consider the slowest CPU that you will use to access the database. Password Safe uses the original Key Stretching algorithm published by Bruce Schneier, which expands the password to contain more entropy to make it significantly harder to employ brute-force processing. The slider sets the number of iterations of the stretching, between 2048 and 222. "
},
{
  "filename": "Options/System_Options/index.html",
  "title": "System Options",
  "text": " System Tab The System Tab provides access to settings that are related to Password Safe\u0027s interaction with the system on which it is running. Put icon in System Tray If checked, Password Safe will minimize to the System Tray area. If unchecked, the program will minimize to the task bar. The icon in the system tray indicates whether the password database is locked () or unlocked (). If it is locked, you will be prompted for the master password when you try to restore it. Remember last N used entries in System Tray menu If the Put icon in System Tray option is enabled, you can right-click on the system tray icon to get to the most recently used entries directly, without going through the application\u0027s main screen. This option allows you to configure how many recent entries you wish to keep in the system tray icon\u0027s list. NOTE: This list is saved in the database only when a read/write database is saved or closed. Hide System Tray icon (Hot Key MUST be active) If checked, this will cause Password Safe to hide his icon in the system tray. This functionality will only be enabled if the Hot Key to start or reopen Password Safe is active. Start Password Safe at Login If checked, this will cause Password Safe to start automatically in the System tray when you log on. Note that you will be prompted for the master password the first time you double-click on the System Tray icon, not before. Recent Password Safe Databases These controls allow you to configure how many recently opened databases are displayed in the File menu. Note that you need to exit and restart Password Safe for changes in this control to take effect. Recent Databases on File Menu rather than as a sub-menu This option determines how the recently opened databases are presented in the File menu - directly on the menu, or as a sub-menu. Open database read-only by default Setting this option will cause Password Safe to open databases in read-only mode by default. This may be useful in a multi-user environment, as by default Password Safe allows write access to the first person who opens the database, and restricts others to read-only mode. With this option, you can determine by site policy who will have write-access to a given database. Allow multiple instances (requires all instances to be restarted) Remove Password Safe data from Registry Prior to version 3.05, Password Safe used the Registry to store configuration data, such as non-default options settings, last database opened, etc. As of this release, this information is split into database-specific and user/machine specific settings, with the latter being stored in a separate configuration file. Selecting this option and clicking on the Apply button will cause the registry settings to be cleared. This is useful if you wish to remove traces of Password Safe on your PC. Note, however, that this means that older versions of Password Safe will revert to default value for some of the settings. Notes: If previous versions of Password Safe have never been installed, or if the data has already been removed, then the checkbox and Apply button will not be displayed. In rare circumstances, where Password Safe is unable to create or write to the configuration file, the registry will be used. Migrate Password Safe configuration to user directory Prior to version 3.22, Password Safe kept application preferences (such as some of the user options, last files opened, window size and location, etc.) in a file in the same directory as the Password Safe executable. This has caused problems with recent versions of Windows when users were not given write access to this directory. Therefore, as of version 3.22, the configuration file (pwsafe.cfg) will be created in the standard location for such files (in the user\u0027s \u0027Application Data\u0027 directory). By default, upgrades to existing installations will not change the existing preference file (\u0022if it ain\u0027t broke, don\u0027t fix it\u0022). However, if a user wishes to switch to the new setting manually, selecting this checkbox and clicking on \u0027Apply\u0027 will do so. In more detail: The configuration file is designed to support multiple users from multiple machines. The migration function will move the current user\u0027s settings (associated with the current PC) from the configuration file to the new location. If there are other user/machine specific configurations in the file, they will be left untouched. If, on the other hand, there are none left after migration, the empty file will be deleted. If you wish to share a common configuration file between users and/or across different PCs, you can either keep the file in the executable directory, or specify its location explicitly using the \u0027-g config-file\u0027 option, as described in command line arguments. "
},
{
  "filename": "Options/Keyboard_Shortcuts/index.html",
  "title": "Keyboard Shortcuts",
  "text": " Shortcuts Tab Password Safe allows you to define key sequences (shortcuts) that perform specific operations in the application. This tab allows you to control and review the shortcuts, as follows. Application Hot Key When checked, pressing the keys in the sequence to the right will restore Password Safe from the system tray, if minimized, or bring it to the front, if obscured by other applications. The sequence may be changed when the option is checked. Program Shortcuts To change a shortcut (or add a new one), select the row with the action you\u0027d like to change, then click on the \u0027Shortcut Key\u0027 field for that entry. Any key combination that you select will be defined as the shortcut for this action. For example, to get the File Properties dialog box to appear when Control, Alt and \u0027p\u0027 are pressed, select the \u0022File \u003E\u003E Properties\u0022 row, click on the \u0027Shortcut Key\u0027 field, and then press the Control Alt and p key. The text \u0027Ctrl\u002BAlt\u002BP\u0027 will appear in the Shortcut Key field, and once you press OK, the change will take effect. For more details on the keys that can (and cannot) be defined as shortcuts, see here. Note that you can define shortcuts where there currently are none, as well as replacing the defaults with those of your choosing. The shortcuts will be stored in your preference file, and will be available the next time you start Password Safe. If you decide to remove a shortcut or revert to the default shortcut for a given action, just select the desired \u0027Shortcut Key\u0027 field and right-click. A popup menu will appear, allowing you to do so. To revert all shortcuts to their default values, click on \u0027Reset All Program Shortcuts\u0027. Database Entry Shortcuts This table summarizes the shortcuts that are associated with specific entries in the currently opened database. Entry-specific shortcuts are defined in the entry\u0027s Additional tab. To edit an entry-specific shortcut, double-click on the desired row. This will display the corresponding entry\u0027s Edit dialog box. "
},
{
  "filename": "Appendices/index.html",
  "title": "Appendices",
  "text": "Appendices "
},
{
  "filename": "Appendices/Aliasing_Passwords/index.html",
  "title": "Aliasing Passwords",
  "text": " Password Aliases If you\u0027re using a \u0022single sign-on\u0022 system that allows you to share the same password across different machines/servers/applications, etc. you can setup Password Safe entries accordingly, so that changing one password affects all other related entries. This is called \u0022aliasing\u0022 entries. This section describes how to define and use such aliases. Summary The basic idea is to allow one entry\u0027s password to be referred to by another. The \u0022referred to\u0022 entry is called the base, and the \u0022referring\u0022 entry (or entries) is (are) called the alias(es). When an entry is set to be the alias of another entry, the alias\u0027s password effectively \u0022follows\u0022 that entry\u0027s password: If you copy the alias\u0027 password to the clipboard, the password that gets copied is the base\u0027s. If you change the base\u0027s password, this is immediately reflected in all the alias entries associated with the base. Although this may sound complicated, in fact it\u0027s quite simple and intuitive to use. The hardest part is setting up the aliases, as described below. Defining an alias In Password Safe, an entry can refer to another\u0027s password by means of a specially formatted password in the referring entry. The format is the \u0022name\u0022 of the referred-to entry enclosed in square brackets. Most of the time, you can think of \u0022name\u0022 as synonymous with the title field of an entry, so if the base entry\u0027s title is \u0022master\u0022, for example, then entering \u0022[master]\u0022 (without the quotes) in another entry\u0027s password field is enough to define the other entry as an alias of \u0022master\u0022. In the general case, a \u0022name\u0022 can contain all of the following fields, separated by colons: Group, Title and User name. Note that if the title is unique in the database, then the other fields are optional. Likewise, if the group and title together or title and user together specify a unique entry, then the corresponding user or group doesn\u0027t have to be specified. In Password Safe entries, only the Title and Password fields are mandatory. Group and User name fields are optional as long as the resulting combination of \u0022group/title/user name\u0022 is unique. As indicated above, the alias\u0027 \u0022password\u0022 is in the form [g:t:u] but in fact you only have to specify enough information to uniquely identify the base entry. So, if there is only one entry in the database with title \u0027t\u0027, then [t] would be sufficient - since title is mandatory and only one item is given, it is assumed to be the title. If there were more than one entry with this title, you would be warned that this is the case, and you would need to be more specific in order to uniquely identify the base entry by adding either its group, its user name, or both. As long as there is a matching unique entry, any of the following formats are accepted: [g:t:u], [g:t], [t:u] or [t]. Specifying a colon without a value implies an empty field, e.g. [g:t:] means an entry with title \u0027t\u0027 in group \u0027g\u0027 and with no user name value and [:t:] specifies an entry with title \u0027t\u0027 in the root with no user name value, etc. If you change the password of an Alias (either via the Generate password button or by typing in the password field), the change will only be made when the Apply or OK button is clicked. However, if you wish to change the base entry\u0027s password, then you should edit the base entry directly. If you change the Alias\u0027s password from [g:t:u] to some other value not in this format, it will change from an alias to a \u0022normal\u0022 entry, and will have no relation to the previous base entry. Of course, you can restore the connection by Undo, or manually editing the password. Unlike shortcuts, which refer to the base entry for all fields, aliases have their own values for all fields except for its password, which is its base\u0027s. For example: copying the aliases URL will use the alias\u0027s value but copying the alias\u0027s password will copy its base\u0027s. Finally, if a normal entry was saving its password history before it was made an alias by changing its password as described above, then it will retain this history. If the alias is then reverted back to a normal entry at a later date, this password history will again become active and be updated if its password is changed. The following examples should make this clear. Examples If the base entry\u0027s title is \u0022LDAP Server\u0022, and there are no other entries with that title, then an alias can be defined by an entry that has \u0022[LDAP Server]\u0022 in the password field. If there are \u0022LDAP Server\u0022 entries in two different groups, say \u0022Dept. A\u0022 and \u0022Dept. B\u0022, then one can specify an alias to the latter by \u0022[Dept. A:LDAP Server]\u0022. Note you do not have to specify the user name if the information you have provided uniquely identifies the base entry. Different user names can also be used to differentiate between similar base entries, e.g., \u0022[LDAP Server:Joe]\u0022 and \u0022[LDAP Server:Mary]\u0022. Finally, all three fields may be specified, as in \u0022[Dept. A:LDAP Server:Joe]\u0022 Display Base entries, that is, entries with at least one alias \u0022pointing\u0022 to them, are displayed with a green triangle instead of a green square in the nested tree view. Alias entries are shown with grey triangles. "
},
{
  "filename": "Appendices/Plain_Text_Export_\u0026_Import_Format/index.html",
  "title": "Plain Text Export \u0026 Import Format",
  "text": " Notes on Plain Text Export \u0026 Import Warning: The Export of sensitive information from a Password Safe database to a text file has serious security consequences. This operation will create an unprotected copy of the passwords in the database. Deleting this copy after use is not sufficient and other actions should be taken to properly erase the data (e.g. third party \u0027shredding\u0027 utilities). The export of sensitive data effectively bypasses the security of the Password Safe program. Note: The Export and Import to/from text files feature has been changed in V3.06. This page describes the current format. Exported text will: Begin with a Title Row as the first record in the text file Use a delimiter to replace the \u0027newline\u0027 character in a multi-line Notes field and the period (\u0027.\u0027) if present in the Title field. The default is \u0027\u00BB\u0027 [Alt\u002B0187], which may be overridden if needed. Imported text is assumed to have: A Title Row as the first record in the text file. A delimiter to reinstate the \u0027newline\u0027 character in a multi-line Notes field and the period (\u0027.\u0027), if present, in the Title field. The default is \u0027\u00BB\u0027 [Alt\u002B0187], which may be overridden if needed.\u003E The Title Row for full data export currently contains the following fields by default, separated by a tab. Group/Title Username Password URL AutoType Created Time Password Modified Time Last Access Time Password Expiry Date Password Expiry Interval Record Modified Time Password Policy History Run Command DCA e-mail Protected Status Symbol list for password generation Notes When exporting data, you may use the \u0027Advanced\u0027 feature to exclude any number of these fields from the Title Row and records. The Advanced option also allows you to specify a subset of the entries to export, as shown below. During Import, the supplied Title Row must include \u0027column headings\u0027 that match exactly one of the above. If any \u0027column heading\u0027 is repeated, only the data in the last one will be added to the entries during import. If a \u0027column heading\u0027 does not match one of the above, the data in that column will be ignored during import. The fields must be separated with the field separator specified for the data in the Import Text dialog box. Notes: To import any data into Password Safe, the Title and Password fields must be present and neither blank nor empty, as it would be if adding a new entry to an existing database. There is no restriction on the order of the \u0027column headings\u0027. Password Safe will use the supplied Title Row to correctly add the specified data to the right field. Data Formats Column Heading/Field Comments Column Heading/Field If present, groups are separated by periods (\u0027.\u0027). The Title field cannot be blank, empty or contain the delimiter character. Username Password Cannot be blank or empty. URL AutoType Created Time See note 1 below Password Modified Time See note 1 below Last Access Time See note 1 below Password Expiry Date See note 1 below Password Expiry Interval See note 1 below Record Modified Time See note 1 below Password Policy See note 3 below History See note 2 below Run command DCA = \u0027Double Click Action\u0027. See note 4 below Shift\u002BDCA = \u0027Double Click Action\u0027. See note 4 below e-mail Protect Symbols Notes The Notes field should be enclosed by double quotes (\u0022like this\u0022). The Notes field should not contain the delimiter character since on import it will be translated to a newline. Notes: 1 Time fields can be one of the following 7 formats: 1. yyyy/MM/dd hh:mm:ss e.g., 2007/01/26 19:31:25 2. ddd MMM dd hh:mm:ss yyyy e.g., Fri Jan 26 19:31:25 2007 3. yyyy-MM-ddThh:mm:ss e.g., 2007-01-26T19:31:25 4. yyyy-MM-ddThh:mm:ssZ (XML only) e.g., 2007-01-26T19:31:25Z 5. yyyy-MM-ddThh:mm:ss\u00B1hh:mm (XML only) e.g., 2007-01-26T19:31:25\u002B01:00 6. 0 Leave the field unset 7. now Use the time of the import operation where: yyyy The year in full. Value is between 1970 and 2038. MM The month; e.g. 01 = January, 02 = February etc. dd The day of the month MMM The short form of the month; e.g. Jan = January, Feb = February etc. ddd The short form of the day of the week; e.g. Mon = Monday, Tue = Tuesday, etc. hh The hour using a 24-hour clock. mm The minutes ss The seconds Note: Format \u00272\u0027 is the output from the ANSI C function \u0027asctime\u0027 and format \u00273\u0027 conforms to the ISO 8601 standard. Notes: 2 Password history is represented in the exported entry record as a text field comprising a header followed by the required number of entries of old passwords: Password History Header: 1 hexadecimal digit - status for saving PWH for this entry (0 = no; 1 = yes) 2 hexadecimal digits - maximum number of entries in this entry 2 hexadecimal digits - number of entries currently saved Each Password History Entry: 8 hexadecimal digits - time oldpassword was set 4 hexadecimal digits - length of old password character string - old password\u003E Notes: 3 The Password Policy is represented in the exported entry record as a text field \u0027ffffnnnllluuudddsss\u0027 in hexadecimal format, e.g. \u0027F000010004002005003\u0027. 6 hexadecimal values are contained in this format. The first value has 4 digits, all other 3. \u0027ffffnnnllluuudddsss\u0027 means in detail: ffff : 4 hexadecimal digits representing the following flags 0x8000: use lower case characters 0x4000: use upper case characters 0x2000: use digits 0x1000: use symbols 0x0800: use hex only (0-9,a-f) characters (if set, then no other flags can be set) 0x0400: use EasyVision password characters 0x0200: use pronounceable password characters 0x01FF: not used nnn : 3 hexadecimal digits : total length of password lll : 3 hexadecimal digits : password minimum number of lowercase characters uuu : 3 hexadecimal digits : password minimum number of uppercase characters ddd : 3 hexadecimal digits : password minimum number of digit characters sss : 3 hexadecimal digits : password minimum number of symbol characters The Password Policy \u0027F000010004002005003\u0027 means F000 : use lowercase, uppercase, digit and symbol characters 010 : use at least 16 (dec) characters 004 : use at least 4 lowercase characters 002 : use at least 2 uppercase characters 005 : use at least 5 digit characters 003 : use at least 3 symbol characters Notes: 4 The following values for Double Click Action are available: -1: Use the database default 0: Copy password to clipboard 1: View/Edit selected entry 2: AutoType 3: Browse to URL 4: Copy notes to clipboard 5: Copy username to clipboard 6: Copy password to clipboard, minimize 7: Browse to URL \u002B AutoType 8: Run Command 9: Send email "
},
{
  "filename": "Appendices/Preferences/index.html",
  "title": "Preferences",
  "text": " Password Safe Preferences Like many applications, Password Safe allows you to configure its behaviour and appearance to best suite your taste and needs. Many applications store such preferences in the Windows \u0022registry\u0022, as a matter of convention and convenience. Previous versions of Password Safe used the registry as well, but this has proven to be problematic for the following reasons: Some of the configurable preferences are security related, and storing them in an open repository such as the Windows registry may enable an attacker to gain access to the database (for example, if the attacker were to disable the locking of the database after an inactivity timeout, the user would assume the database was safely locked while out to lunch, whereas the attacker could then access it at her convenience). Many people are using Password Safe from a disk-on-key or otherwise sharing the same database across several machines. It\u0027s impractical to share the configuration data in a registry in such a manner. Password Safe has a number of preferences, each with a reasonable default value. When a user changes the configuration to a non-default value, the new value is stored by Password Safe. Password Safe defines preferences as security-related or non-security related. The former are kept in the database, encrypted with the same key as the user\u0027s data. Non-security-related preferences are kept in a configuration file, pwsafe.cfg. This file is in XML format, with sections per host machine and per user, so that the file may be shared between different users, and across different machines. By default, pwsafe.cfg is kept in the \u0022local app data\u0022 directory, that is, C:\\Users\\username\\AppData\\Local\\PasswordSafe. This may be overridden by setting the PWS_PREFSDIR environment variable. The -g command line option (as described in Command Line Arguments may also be used to either specify a file name (which will be looked for in the above directories), or an absolute file path. Historically (before version 3.22 of PasswordSafe), the configuration file was stored in the same directory as the pwsafe.exe file. Therefore, PasswordSafe will also search that directory for the configuration file, if not found in the \u0022local app data\u0022 directory. The following tables describes the configuration items. Most of them are configurable via the \u0022Manage \u2192 Options\u0022 dialog box. As we use XML to save these values, field names are case sensitive. Preferences stored in the \u0022pwsafe.cfg\u0022 file apply to all open databases. Those stored in the database apply only to that particular database. In Windows Vista and later, the pwsafe.cfg file can be found in: \u0022C:\\Users\\\u003Cusername\u003E\\AppData\\Local\\PasswordSafe\u0022 but, in Windows XP, it can be found in: \u0022C:\\Documents and Settings\\\u003Cusername\u003E\\Application Data\\PasswordSafe\u0022. Note both directories may be hidden and Folder View properties may need to be modified in order to be able to view it. Notes: Obsolete preferences are not listed. Only non-default preference values are stored in the configuration file or database. Warning: Do NOT modify any of the preferences in the pwsafe.cfg file manually, as this may cause unexpected or unpredictable results. Whilst we have made every effort to verify any preference we read in, we cannot guarantee that manually edited values will not cause a problem. Database specific preferences Note database preferences are only saved within the database if their value differs from their default value. Boolean (true (\u00271\u0027)/false \u0027(0\u0027)) preferences in alphabetical order Preference Default Comment CopyPasswordWhenBrowseToURL false Copy the entry\u0027s password to the clipboard when invoking the entry\u0027s \u0022Browse to URL\u0022 LockDBOnIdleTimeout true Lock database if the user has not used the PC for a number of minutes. See \u0022IdleTimeout\u0022 integer preference for the threshold value in minutes MaintainDateTimeStamps false Entry last access times are recorded, if the database is in Read/Write mode PWMakePronounceable false Password generation policy - convert generated passwords to be more pronounceable PWUseDigits true Password generation policy - use numbers PWUseEasyVision false Password generation policy - use Easy-Vision characters so that one character isn\u0027t mistaken for another e.g. number 0 (zero) and letter O (capital O) etc. PWUseHexDigits false Password generation policy - generate a password with only hexadecimal characters (always an even number) PWUseLowercase true Password generation policy - use lower case characters PWUseSymbols true Password generation policy - use symbols PWUseUppercase true Password generation policy - use upper case characters SaveImmediately true Save database after every database change SavePasswordHistory false Save entry\u0027s old passwords when a new password is assigned ShowDragbar true Show Dragbar ShowNotesDefault false Show Notes in Add and Edit ShowPasswordInTree false Password is displayed in Tree View (requires Username to be displayed) ShowPWDefault false Password is displayed by default in Add/Edit ShowUsernameInTree true Username is displayed in Tree View UseDefaultUser false Use the default user text preference when adding a new entry ExcludeFromClipboardHistory true Keeps data sent to clipboard from going to the clipobard history (Windows 10 and later). ExcludeFromScreenCapture true Hide Password Safe from Windows\u0027 screen capture function Numerical preferences in alphabetical order Preference Default Min Max Comment IdleTimeout 5 1 600 Threshold in minutes to determine whether to lock Password Safe due to inactivity NumPWHistoryDefault 3 0 255 How many passwords to keep in an entry\u0027s password history field PWDefaultLength 12 4 1024 Default password length PWDigitMinLength 0 0 1024 Default minimum number of digits in a generated password PWLowercaseMinLength 0 0 1024 Default minimum number of lower case characters in a generated password PWSymbolMinLength 0 0 1024 Default minimum number of symbols in a generated password PWUppercaseMinLength 0 0 1024 Default minimum number of upper case characters in a generated password TreeDisplayStatusAtOpen AllCollapsed n/a n/a Values are: AllCollapsed, AllExpanded or AsPerLastSave Textual Preferences in alphabetical order Preference Default Comment DefaultAutotypeString \\u\\t\\p\\t\\n The database\u0027s default AutoType string. Note that each entry may override this value DefaultSymbols \u003Cnone\u003E The default list of symbols to be used when generating a password with symbols. Note: each entry may override this value. DefaultUsername \u003Cnone\u003E Default value for the Username field when creating new entries TreeListSampleText \u0022AaBbYyZz 0O1IlL\u0022 Sample text to use when deciding what font to be used in the Tree View Application related preferences stored within the Configuration file (pwsafe.cfg) Note preferences are only saved if their value is different from their default value. These preferences apply to all databases on a given machine by a given user. Boolean (true (\u00271\u0027)/false \u0027(0\u0027)) preferences in alphabetical order Preference Default Comment AlwaysOnTop false Main window always on top BackupBeforeEverySave true Rename current database following the Backup settings before saving any changes to it ClearClipboardOnExit true Clear the clipboard of Password Safe information when Password Safe ends ClearClipboardOnMinimize true Clear the clipboard of Password Safe information on minimize DatabaseClear false Lock database on minimize, which implies clear database from memory DefaultOpenRO false By default, set the Read-Only checkbox during the open of databases deletequestion false Don\u0027t ask for confirmation when deleting a single entry dontaskquestion false Don\u0027t ask for confirmation when copying password to clipboard EscExits true The ESC key will close the database and exit Password Safe (if the System Tray is not being used) ExplorerTypeTree false Show groups first in tree view HideSystemTray false Hide the Password Safe System tray icon. Only able to be set if the user has already set a Hot Key HighlightChanges true Highlight changed unsaved entries in blue HotKeyEnabled false True if the user has defined a Hot Key to get quick access to Password Safe ListSortAscending true The last sort direction in List View (ascending [true] or descending [false]) ListViewGridLines false Show grid lines in list view LockOnWindowLock true Lock Password Safe database when the user locks their Windows session MinimizeOnAutotype true Minimize Password Safe during AutoType. Database may also be locked depending on the setting to lock it on minimize MRUOnFileMenu true Most recently used databases are shown in the File menu or in in their own sub-menu from the File menu MultipleInstances true Allow multiple instances of password Safe to be started. Changing this value will require Password Safe to be restarted to take effect. NotesWordWrap true Note will be wrapped in its display area during Add/Edit PreExpiryWarn false Warn user on database open if there are any entries with expired or soon to expire passwords QuerySetDef true Ask user each time they add an entry whether to use the Username for all new entries ShowDragbar true Show Dragbar ShowFindToolBarOnOpen true Show the Find toolbar when Password Safe starts. This is determined by the state of this toolbar when Password Safe was last ended ShowNotesAsToolTipsInViews false Show an entry\u0027s Notes as a tool tip in both Tree and List views (only the first 250 characters will be displayed) ShowToolbar true Show Toolbar UseNewToolbar true Use New or Classic toolbar UsePrimarySelectionForClipboard false Determine which clipboard to use (Linux only) UseSystemTray true Put Password Safe icon in Windows System Tray Numerical preferences in alphabetical order Preference Default Min Max Comment AddEditFontPtSz n/a 0 n/a Add/Edit font size in tenths of a point BackupMaxIncremented 1 1 999 Only valid if an incremental number is used for the BackupSuffix BackupSuffix 0 n/a n/a Values are: None, datetime or an incremental number column1width n/a n/a n/a The width of the first column in the List View when Password Safe was last exited column2width n/a n/a n/a The width of the second column in the List View when Password Safe was last exited column3width n/a n/a n/a The width of the third column in the List View when Password Safe was last exited column4width n/a n/a n/a The width of the fourth column in the List View when Password Safe was last exited DlgOrientation 0 0 2 How to choose wide or tall dialog screens: 0 - automatically (default), 1 - force tall, 2 - force wide. DoubleClickAction Copy Password n/a n/a See Help entry DCA Values export HotKey none n/a n/a The Hot Key value. Up to and including Password Safe version 3.42.1, this is stored as a decimal integer created from the virtual keycode for the character in the lower word plus the Microsoft Foundation Class CHotKeyCtrl modifier flags in the higher word. After version 3.42.1, the preference element is augmented with XML attributes that are used to set the virtual key code and modifier flags (e.g., Ctrl=\u00221\u0022 Key=\u002230\u0022) to the internal Password Safe format that can be used across other platforms. maxmruitems 4 0 20 Number of most recently used databases saved in the File menu MaxREItems 25 0 25 Maximum number of \u0022Recent used entries\u0022 to be saved in the database and displayed from the System Tray icon to allow quick access NotesFontPtSz n/a 0 n/a Notes font size in tenths of a point OptShortcutColumnWidth 92 10 512 Size of the columns in the Manage \u2192 Options \u2192 Shortcuts tab PasswordFontPtSz n/a 0 n/a Password font size in tenths of a point PreExpiryWarnDays 1 1 30 When to warn on about-to-expire passwords sortedcolumn 0 0 15 Previous column used to sort the List View ShiftDoubleClickAction Copy Password n/a n/a See Help entry DCA Values export TreeFontPtSz n/a 0 n/a Tree \u0026 List View font size in tenths of a point VKFontPtSz n/a 0 n/a Virtual keyboard font size in tenths of a point Textual Preferences in alphabetical order Preference Default Comment AddEditFont \u003Cnone\u003E, which corresponds to Segoe UI Symbol 10pt on Windows Information about the font used to display fields in the Add/Edit property pages AddEditSampleText \u0022AaBbYyZz 0O1IlL\u0022 Sample text to use when deciding what font to be used to display when adding or editing entries AltBrowser \u003Cnone\u003E Full path to an alternate browser AltBrowserCmdLineParms \u003Cnone\u003E Special command line parameters for the alternate browser, if specified. Do NOT enclose this value in single or double quotes unless your chosen browser requires them. AltNotesEditor \u003Cnone\u003E Full path to a text editor to be used to edit an entry\u0027s Notes field rather than the Windows default application. AltNotesEditorCmdLineParms \u003Cnone\u003E Special command line parameters for the alternate text editor, if specified. Do NOT enclose this value in single or double quotes unless your chosen external editor requires them. BackupDir \u003Cnone\u003E Usually the database backup is stored in the same directory as the database. This can be overridden using this preference BackupPrefixValue \u003Cnone\u003E Usually the current database name is used to prefix any backup file names. This can be overridden using this preference ColumnWidths \u003Cnone\u003E Non-default column widths in List View currentbackup \u003Cnone\u003E Path and name of last backup file currentfile \u003Cnone\u003E Currently (i.e., last) opened file LanguageFile \u003Cnone\u003E The code of last language file used by the user. It is in the form \u0022LL\u0022 or \u0022LL_CC\u0022, where LL = ISO 639-1 two-character Language code e.g. EN, FR, DE, HE... see http://www.loc.gov/standards/iso639-2/ and CC = ISO 3166-1 two-character Country code e.g. US, GB, FR, CA... see http://www.iso.org/iso/en/prods-services/iso3166ma/index.html lastview tree Last view selected: Tree or List view (\u0022tree\u0022 or \u0022list\u0022) LastUsedKeyboard \u003Cnone\u003E Save the code of the last Virtual Keyboard used ListColumns \u003Cnone\u003E Non-default column order in List View. Note the list of comma separated column numbers reflect internal numbering of the fields and should not be edited manually MainToolBarButtons \u003Cnone\u003E A list of the Toolbar buttons and their order as customised by the user. A separator is shown as a ~ NotesFont \u003Cnone\u003E, which corresponds to Segoe UI Symbol 10pt on Windows Information about the font used to display the Notes field in the basic Add/Edit property page NotesSampleText \u0022AaBbYyZz 0O1IlL\u0022 Sample text to use when deciding what font to be used to display the Notes field in the basic Add/Edit property page PasswordFont \u003Cnone\u003E, which corresponds to Consolas 12pt on Windows Information about the font used to display the password PswdSampleText \u0022AaBbYyZz 0O1IlL\u0022 Sample text to use when deciding what font to be used to display passwords treefont \u003Cnone\u003E, which corresponds to Segoe UI Symbol 10pt on Windows Information about the font used in the Tree \u0026 List Views TreeListSampleText \u0022AaBbYyZz 0O1IlL\u0022 Sample text to use when deciding what font to be used in the Tree \u0026 List View VKeyboardFontName \u003Cnone\u003E Name of the Unicode font to be used to display all characters used in the Virtual Keyboard. This includes both Latin and non-Latin characters VKSampleText \u0022AaBbYyZz 0O1IlL\u0022 Sample text to use when deciding what font to be used in the Virtual Keyboard "
},
{
  "filename": "Appendices/Run_Command/index.html",
  "title": "Run Command",
  "text": " Run Command An entry\u0027s \u0027Run Command\u0027 field can contain a command that will be run when the Run Command action is selected. Anything that you can do in Windows\u0027 \u0022Start \u2192 Run\u0022 can be used here. In addition, Password Safe is able to pass arguments to the command such as the entry\u0027s username, password, etc., as described below. This allows you to \u0027program\u0027 fairly complex actions, such as invoking a remote access program (PuTTY, for example) and passing it the username and password associated with the entry. In general, \u0027variables\u0027 are replaced with values associated with them before being passed to the computer for execution. The dollar (\u0027$\u0027) sign is used to indicate a variable. Variables are specified as \u0027$name\u0027 and are case sensitive. Variable names always start with an alphabetic character and the remaining characters are alphanumeric. The variable name is terminated either by encountering a non-alphanumeric character (such as a space) or the end of the Run Command. To use a variable immediately followed by an alphanumeric character in the Run Command, enclose the variable\u0027s name in curly brackets e.g., \u0027${varname}string\u0027. To use a \u0027$\u0027 in the string as normal text (not indicating that the following text is a variable name), escape it using a back-slash (\u0027\\\u0027) e.g., \u0027\\$text\u0027 becomes \u0027$text\u0027 and is not treated as a variable called \u0027text\u0027. To use a back-slash before a \u0027$\u0027 as a back-slash, escape it with a back-slash e.g. \u0027\\\\$name\u0027 becomes \u0027\\$name\u0027 in the resulting text and \u0027$name\u0027 is treated as a variable. A back-slash does not have to be escaped unless it precedes a \u0027$\u0027 indicating a following variable. A variable may be followed by a numerical value within square brackets is called an \u0027Index value\u0027. The index value \u0027n\u0027 can be preceded by \u0027\u002B\u0027 or \u0027-\u0027 e.g. [-2] or [2] or [\u002B2]. Password Safe treats an index that equates to zero as meaning the entire field. The following variables are currently recognised: Application related: appdir Directory containing the Password Safe application. See notes 1 \u0026 2 below. Database related: dbdir Directory of current open database. See notes 1 \u0026 2 below. fulldb Full path, filename and extension of current open database. See note 2 below. dbname Current open database filename. dbextn Current open database extension. Current entry related: g or group Group (full tree structure back to root with groups separated by periods). G or GROUP The group containing this entry. t or title Title u or user Username p or password Password e or email e-mail a or autotype AutoType. See Note 5 below. url URL n or n[0] The complete Notes field (also: notes or notes[0]). See note 3 below. n[i] or notes[i] ith line of the Notes field counting from the start, i.e., i=1 is the first line, i=2 means the second line etc. See note 4 below. n[-i] or notes[-i] ith line of the Notes field counting from the end, i.e., i=1 is the last line, i=2 means the penultimate line etc. See note 4 below. Notes 1 Directory values (appdir or dbdir) do not have an ending \u0027\\\u0027. Remember to add this if you need it in your Run Command. 2 The contents of variables (including directory and full path values) may contain blanks. You may need to enclose the result in quotes in your Run Command for correct execution. 3 If the Notes field contains more than one line, it will include any embedded carriage return (CR) or line feed (LF). This may cause issues when executed as CR and/or LF will be taken as \u0027enter\u0027. 4 Any trailing CR and/or LF are removed from single lines selected from the Notes field. 5 If the AutoType variable is present in the Run Command, AutoType will be performed once the target window is active. The variable and its value, if present, will be removed from the string that is executed. This variable can appear anywhere in the Run Command as it only specifies what Password Safe will do after the command string has been executed. Unlike other variables, this one will be able to take a value to override the entry\u0027s current value. The format is as follows (\u0027$autotype\u0027 can replace \u0027$a\u0027 in the following examples): $a Use current entry value. ${a} Use current entry value (used if text immediately follows the \u0027$a\u0027 variable). $a(value) Use AutoType string specified between the round brackets. ${a}(value) Use AutoType string specified between the round brackets. Note: Be sure to add quotes around your string if required e.g., if your database directory contains spaces, to access a text file in it based on your open database name, you would need the following (with quotes): \u0027$dbdir\\\\$dbname.txt\u0027 Notice that the backslash is escaped so that the \u0027$dbname\u0027 is recognised as a variable. On Windows, the normal substitution of environment variables (specified as %variable_name%) is performed. For example: \u0027%windir%\\notepad.exe\u0027 could become (depending on your installation) \u0027C:\\Windows\\notepad.exe\u0027. Current values set in your environment can be determined by running \u0027cmd.exe\u0027 and issuing the \u0027set\u0027 command without any parameters. Any unknown environment variable is left unchanged in the Run Command e.g., %xyz%\\notepad.exe remains as %xyz%\\notepad.exe if variable \u0027xyz\u0027 is not set. Note: Windows environment variables are not case sensitive. Examples The following Run Command will cause the Putty program to connect to myHost giving the entry\u0027s username and password: \u0022C:\\Program Files\\PuTTY\\putty.exe\u0022 -ssh ${u}@myHost 22 -pw $p This will open a new instance of Password Safe with the specified database (Thanks to Dave for this one): ${autotype}(\\p\\n)\u0022${appdir}\\pwsafe.exe\u0022 \\UNC\\path\\to\\database.psafe3 Make sure Manage \u2192 Options \u2192 System \u0022Allow multiple instances\u0022 is checked for this to work You might also want to set the Double-Click Action for this entry to \u0022Run Command\u0022 "
},
{
  "filename": "Appendices/Shortcut_Keys/index.html",
  "title": "Shortcut Keys",
  "text": " Keyboard Shortcut/Accelerator keys Following are the details and limitations that apply to customized keyboard shortcuts for Password Safe. These key combinations have been tested on a 102-key extended UK keyboard. The standard characters should work on any other keyboard with Latin characters. Some key combinations may be different on these keyboards - for example on a UK keyboard the # symbol has its own key (with the tilde ~) but on a US keyboard it is above the 3 key (i.e., Shift\u002B3). Please read this table and translate to your specific keyboard as appropriate - you can always experiment to see if a particular key combination works for you. Depending on your language, certain keys with the Alt key are reserved. These correspond to the letters used to invoke the main menu. Pressing the Alt key in the main display will show the these characters as underlined. For English, these would be Alt\u002BF (File), Alt\u002BE (Edit), Alt\u002BV (View), Alt\u002BM (Manage) and Alt\u002BH (Help). For other languages, please refer to those letters underlined on the main menu to determine what will be reserved for you. For example, in German \u0022File\u0022 becomes \u0022Datei\u0022 and so Alt\u002BD would be reserved instead of Alt\u002BF. The Enter key is also reserved as it is used to set the value of a shortcut in the \u0022Manage \u2192 Options \u2192 Shortcuts\u0022 tab. Therefore, it is not possible to assign this key. Note that \u0022Expand/Collapse Group\u0022 function in Tree View mode is achieved by selecting the group and pressing the Enter key. Although, this could have been changed to be any other valid shortcut, the use of the Enter key for this would still be active as it is a function of the Tree View. For this reason, this function cannot be changed via the Shortcuts Property Page. The Escape key is reserved as it can be used to close the Find Toolbar or to minimise Password Safe to the System Tray (or to exit the application if the System Tray is not used). It is also the equivalent to the Cancel button on any dialog. By design, the shortcut value for Viewing an entry in read-only mode is the same as for Editing the entry in read-write mode. They cannot be set independently. Similarly, \u0027Delete Entry\u0027 is the same as \u0027Delete Group\u0027 and \u0027Rename Entry\u0027 is the same as \u0027Rename Group\u0027. These are shown in the Shortcut Property Page as \u0027Delete\u0027 and \u0027Rename\u0027, respectively. Some keys are reserved by Windows - for example Ctrl\u002BAlt\u002BDelete; Tab; Shift\u002BTab; Alt\u002BTab; Alt\u002BShift\u002BTab etc. Non-standard keys are not supported (e.g., those only on a Kanji keyboard). Password Safe shortcut setting does not recognise the difference between the Alt, Ctrl and Shift keys on the left side of the keyboard from those on the right. This may make some key combinations unavailable on some keyboards. For example, the Euro symbol on a UK 102 extended keyboard is the right Alt key (Alt Gr)and the 4 key. However, pressing this combination results in a shortcut of Ctrl\u002BAlt\u002B4. This is the way Microsoft\u0027s HotKey processing works and is not a Password Safe restriction. Note: Setting non-standard keys may make these particular shortcuts unavailable if you then use another computer with a keyboard that does not have these keys. We recommend that you only select combinations from those listed here. In the table below, the column headings mean: Heading Means pressing K Only the key A\u002BK The key with the Alt key C\u002BK The key with the Ctrl key S\u002BK The key with the Shift key A\u002BS\u002BK The key with the Alt and Shift keys C\u002BS\u002BK The key with the Ctrl and Shift keys A\u002BC\u002BK The key with the Alt and Ctrl keys A\u002BC\u002BS\u002BK The key with the Alt, Ctrl and Shift keys Key Name K A\u002BK C\u002BK S\u002BK A\u002BS\u002BK C\u002BS\u002BK A\u002BC\u002BK A\u002BC\u002BS\u002BK Backspace Y N Y Y N Y Y Y Tab N N Y N N Y Y Y Enter R (1) N Y N N Y Y Y Escape N N N N N N N N Space Y N Y Y N Y Y Y Page Up Y Y N Y Y N N N Page Down Y Y N Y Y N N N End Y Y Y Y Y Y Y Y Home Y Y Y Y Y Y Y Y Left Arrow Y Y Y Y Y Y Y Y Up Arrow Y Y Y Y Y Y Y Y Right Arrow Y Y Y Y Y Y Y Y Down Arrow Y Y Y Y Y Y Y Y Print Screen N N N N N N N N Insert Y Y Y Y Y Y Y Y Delete Y N Y Y N Y N Y 0-9 Y Y Y Y Y Y Y Y A-Z Y Y R (2) Y Y Y Y Y Num pad 0-9 Y Y Y N Y N Y N Num pad * Y Y Y Y Y Y Y Y Num pad \u002B Y Y Y Y Y Y Y Y Num pad - Y Y Y Y Y Y Y Y Num pad . Y Y Y N N N N N Num pad / Y Y Y Y Y Y Y Y F1 R (3) Y Y Y Y Y Y Y F2 Y Y Y Y Y Y Y Y F3 Y Y Y Y Y Y Y Y F4 Y R (2) Y Y Y Y Y Y F5 Y Y Y Y Y Y Y Y F6 Y Y Y Y Y Y Y Y F7 Y Y Y Y Y Y Y Y F8 Y Y Y Y Y Y Y Y F9 Y Y Y Y Y Y Y Y F10 Y Y Y Y Y Y Y Y F11 Y Y Y Y Y Y Y Y F12 Y Y Y Y Y Y Y Y Num Lock Y Y N Y N Y Y Y Scroll Lock Y Y Y Y Y Y Y Y ; : (4) Y Y Y Y Y Y Y Y \u002B = Y Y Y Y Y Y Y Y , \u003C Y Y Y Y Y Y Y Y - _ Y Y Y Y Y Y Y Y . \u003E Y Y Y Y Y Y Y Y / ? (4) Y Y Y Y Y Y Y Y # ~ (4) Y Y Y Y Y Y Y Y [ { (4) Y Y Y Y Y Y Y Y \\ | (4) Y Y Y Y Y Y Y Y ] } (4) Y Y Y Y Y Y Y Y \u0027 @ (4) Y Y Y Y Y Y Y Y \u0060 \u00AC (4) Y Y Y Y Y Y Y Y Notes: Since the Enter key is used to set the shortcut value, it cannot be assigned to any function. Ctrl\u002BQ and Alt\u002BF4 are reserved for exiting the Password Safe application. F1 is reserved for Help. This may be keyboard dependent. "
},
{
  "filename": "Appendices/Entry_Icons/index.html",
  "title": "Entry Icons",
  "text": " Entry Icons The following images are used to show the type of entry in the Tree and List views. Note: these images are always displayed in the Tree view. In the List view, the Icon column can be added or removed using the Column Picker but can only be in column 1. Group [Tree View only] Empty Group [Tree View only] Normal entry Normal entry with aliases Normal entry with shortcuts Alias Shortcut In addition, a Normal entry can have an expiry date placed on its password. If the user specifies a warning interval e.g. 5 days before a password expires, the image shown changes to be half purple. Normal entry - the password will expire within the user\u0027s specified interval Normal entry with aliases - the password will expire within the user\u0027s specified interval Normal entry with shortcuts - the password will expire within the user\u0027s specified interval Once expired, it will be completely purple. Normal entry - the password has expired Normal entry with aliases - the password has expired Normal entry with shortcuts - the password has expired "
},
{
  "filename": "Program_Credits/index.html",
  "title": "Program Credits",
  "text": "Program Credits "
},
{
  "filename": "Program_Credits/Program_Credits/index.html",
  "title": "Program Credits",
  "text": " Program Credits Grateful thanks to Bruce Schneier for creating the Twofish and Blowfish algorithms and for releasing Password Safe to the public; and to GitHub and SourceForge.net for hosting the project and supporting the Open Source community. Password Safe version 3.12 and later uses an algorithm created by Tom Van Vleck, Morrie Gasser, and Dan Edwards to generate pronounceable passwords. Password Safe version 3.29 and later use pugixml for parsing the application\u0027s configuration file. The code for pugixml is provided under the MIT license. The wxWidgets build of Password Safe from version 1.12 and later use graphics from PNG Repo provided under the Creative Commons 4.0 license. The links that follow lead to various pages on the SourceForge web site related to the Password Safe project: Password Safe Home Page: Information and news about Password Safe as well as announcements about project status and new releases. The home page is maintained by Brad Chance - Thanks Brad! Development Team: Just some of the folks that have helped develop and keep Password Safe going. Password Safe Forum: A forum for questions, support, and problems. Password Safe\u0027s low volume (roughly one message every month or so) spam free announcement and user mailing list page. "
},
];

function getRelativePath(relativePath) {
    var element = document.getElementById('search');
    var searchPath = element.dataset.searchpath;
    var absolutePath = searchPath + relativePath;
    return absolutePath;
}
// Get the search field and results div
var searchField = document.getElementById('search');
var resultsDiv = document.getElementById('searchResults');

// Add event listener to the search field
searchField.addEventListener('keyup', function () {
    // Get search term and make it lowercase
    var searchTerm = searchField.value.toLowerCase();

    // Split the search term into words and filter out empty strings and single characters
    var searchWords = searchTerm.split(',').filter(function (word) {
        return word.length > 2;
    });

    // Clear the results div
    resultsDiv.innerHTML = '';

    // Create a new button element
    var closeButton = document.createElement('button');
    // Change the button text to 'x'
    closeButton.innerHTML = 'x';

    // Add a class to the button for styling (optional)
    closeButton.className = 'close-button';

    // Add an event listener to the button to handle the click event
    closeButton.addEventListener('click', function () {
        // Clear the div's content when the button is clicked
        resultsDiv.innerHTML = '';
        resultsDiv.style.display = 'none';
    });

    // If the search term is empty or only whitespace, stop here
    if (!searchTerm.trim()) {
        resultsDiv.style.display = 'none';
        return;
    }

    // Filter the data
    var results = searchData.filter(file => {
        // Check if all words appear in the title or text
        return searchWords.every(word =>
            file.title.toLowerCase().includes(word) ||
            file.text.toLowerCase().includes(word)
        );
    });

    // Create an unordered list
    var resultList = document.createElement('ul');

    // Add each result to the results list
    results.forEach(result => {
        // Create a list item and a link for each result
        var resultItem = document.createElement('li');
        var resultLink = document.createElement('a');
        resultLink.textContent = result.title;
        resultLink.href = getRelativePath(result.filename);

        // Add the link to the list item
        resultItem.appendChild(resultLink);

        // Highlight all occurrences of the search terms in the text, without requiring full word matches
        var fullText = result.text;
        var snippets = [];

        // Function to find and process all occurrences of the search terms
        searchWords.forEach(word => {
            var re = new RegExp(`(\\S*\\s)?(\\S*\\s)?(\\S*\\s)?(\\S*\\s)?(\\S*\\s)?${word}(\\s\\S*)?(\\s\\S*)?(\\s\\S*)?(\\s\\S*)?(\\s\\S*)?`, 'gi');
            fullText = fullText.replace(re, function (match, ...groups) {
                var snippet = match;
                var prefix = groups.slice(0, 5).join('');
                var suffix = groups.slice(5, 10).join('');
                var matchIndex = match.toLowerCase().indexOf(word.toLowerCase());
                var startIndex = Math.max(fullText.indexOf(match) - prefix.length, 0);
                var endIndex = fullText.indexOf(match) + matchIndex + word.length + suffix.length;

                // Check if the start and end of the snippet are not the start or end of the full text
                var prefixEllipsis = startIndex > 0 ? "..." : "";
                var suffixEllipsis = endIndex < fullText.length ? "..." : "";

                snippet = prefixEllipsis + prefix + '<mark>' + match.substr(matchIndex, word.length) + '</mark>' + suffix + suffixEllipsis;

                // Avoid duplicate snippets
                if (!snippets.includes(snippet)) {
                    snippets.push(snippet);
                }

                // Return the original match with the search term highlighted, not altering the surrounding text
                return match.substr(0, matchIndex) + '<mark>' + match.substr(matchIndex, word.length) + '</mark>' + match.substr(matchIndex + word.length);
            });
        });

        // Combine all unique snippets into the highlightedText
        var highlightedText = snippets.join(' ');

        // Create a paragraph for the context and add it to the list item
        var contextParagraph = document.createElement('p');
        contextParagraph.innerHTML = highlightedText;
        resultItem.appendChild(contextParagraph);

        // Add the list item to the list
        resultList.appendChild(resultItem);
    });

    // Add the results list to the results div
    resultsDiv.appendChild(resultList);

    // Append the button to the div
    resultsDiv.appendChild(closeButton);

    // If there are no results, hide the results div and stop here
    if (results.length === 0) {
        resultsDiv.style.display = 'none';
        return;
    }

    // Show the results div
    resultsDiv.style.display = 'block';
});