Export Passwords from KeePass for Pleasant
See why customers choose Pleasant Password Server with a KeePass client
It is possible to export a user's set of passwords, by using KeePass for Pleasant Password Client.
Creating a file export can be beneficial for analyzing data, storing data, disaster recovery, reporting and auditing, or manipulating the information in different formats.
Important: When making a copy of these secured vault passwords, ensure that the new file location is properly secured.
Have Questions? Contact Us!
There are numerous methods and formats available for exporting:
- From KeePass desktop app
- Via API Script (to CSV file)
The most flexible of the export options are the KeePass Customizable HTML file export, or the ability to export via API (mentioned in another section below).
KeePass Formats Available:
- CSV, KDB, KDBX, XML, customizable HTML, Transform using XSL, or as Windows Favourites (bookmarks)
- The export can be encrypted and password protected, or plain text, as you choose.
- Not included in the Export/Import files:
- Security Access
- File Attachments
- Plugin data
By default the Export functionality is turned off for users, but can be simply re-enabled by users unless this option is restricted (see section: Restrict Password Export).
To re-enable export on the user's desktop:
- Navigate to KeePass for Pleasant > Tools > Options > Policy tab
- Check these options on:
- Export * (Allow exporting entries.)
- Export - No Key Repeat * (Do not require entering current master key before exporting.)
- * Restart KeePass
If the first option is not enabled you may see:
- KeePass: "This operation is not allowed by the application policy. Ask your administrator to allow this operation. The following policy flag is required: Export - Allow exporting entries."
If the second option is not enabled you may see the following prompt & popup:
- KeePass: "Enter Current Master Key" (window prompt)
- KeePass: "The composite key is invalid! Make sure the composite key is correct and try again." (popup)
Restricting Password Export
The ability to Export passwords / information can be restricted by administrators:
- By navigating to the KeePass options,
- Turning off KeePass Export and "Copy Whole Entries", and
- Assigning this Client Configuration file to be enforced for selected Users or Roles.
Better Alternatives than Exporting Passwords
These related methods are useful ways to manage the storage of your passwords, and are likely more secure/more convenient in many situations:
- VM Snapshots
- Database Replication
- Backup and Restore
- Scripted Automatic Backups
- Caching Passwords Offline
- Export Entries to CSV file via API
- Archive Folder
Password Export Steps
- Export All: Select Export from the File menu
- Export a Folder: Right-Click on a folder
- Select a Format type and a filename
- Click Ok
- Enter a custom password (version 7.9.6)
- Click Ok
KeePass File Import Steps
To import this file back into either KeePass for Pleasant Password Server or the regular KeePass (keepass.info):
- Import the file into KeePass
- When prompted, enter the custom password (version 7.9.6), or the default password (previous versions):
How do I change the KDBX file password?
To store your exported passwords in a KDBX file with a password different than the default password mentioned in the section above, then follow these steps:
- Open KeePass for Pleasant Password Server.
- Export your entries to a KDBX file.
- Exit KeePass for Pleasant Password Server (make sure it's completely closed)
- Open up the regular version of KeePass (download from: https://keepass.info)
- Create a new database.
- Open File -> Change Master Key, and set a new password.
- Import your passwords from the KDBX file you exported earlier.
Exporting can be handled nicely using an export script which retrieves the information from the server via the Application Programming Interface (API):
Contact Us for an example script or if you have additional questions.
Scheduling Automatic Exports
Exports can be scheduled in combination with a script and a task scheduler. For the purpose of Disaster Recovery this could be helpful, to save this information into another secure location.
We would first recommend using the built-in Backup & Restore. Exporting can potentially consume time or interfere with other user actions.