1
Nov
2007
How-to: Getting Started with KeeForm in KeePass
For those who don’t know what KeePass is, please go to http://www.keepass.info.
For those who know what KeePass is, I won’t be showing you the basic usage of KeePass. Go read the manual.
For those who are paranoid when it comes to keylogger. USE THE DRAG & DROP FEATURE OF KEEPASS.
Okay, let me get on to using KeeForm with KeePass. Basically setting it up is pretty straight forward. You simply have to add this entry:
KeeUrlOverride=cmd://”{APPDIR}\KeeForm.exe” “{URL}” “{USERNAME}” “{PASSWORD}” {ENTERFORM}
into KeePass.ini.
By adding the above line, the next time you CTRL+U to open any URL, KeeForm will kick in. The author of KeeForm claims that by using KeeForm, you will be safe from keylogger. This is because KeeForm hook on to Internet Explorer API (probably via BHO a.k.a. Browser Helper Object) to send in the credential.
Let me break down the above setting for ease of understanding.
cmd://”{APPDIR}\KeeForm.exe”
This will instruct KeePass to execute KeeForm.exe. {APPDIR} simply tell KeePass that KeeForm.exe is located in the same directory as itself. Note the double-quote (”). It’s there just in case the folder that store KeePass have spaces in between the path name (e.g. C:\Program Files\KeePass\).
“{URL}”
This indicate the URL (the one that you entered in the URL field when you create a new entry) that KeeForm will open. Note the double-quote (”). It’s for the same reason as above.
“{USERNAME}”
This is the same username placeholder that you entered when you create the entry. Note the double-quote (”). It’s for the same reason as above.
“{PASSWORD}”
The above should be pretty obvious.
{ENTERFORM}
What the above does is, after KeeForm have filled up the necessary fields (i.e. user name, password), it will automatically submit the form.
I will be posting the how-to of customizing actions for KeeForm. Till then.
