Skip to content
subic edited this page May 30, 2018 · 6 revisions

MacPassHTTP is a port of the KeePassHTTP plugin to MacPass

Installing MacPassHTTP

  1. Download MacPassHTTP (https://github.com/MacPass/MacPassHTTP/releases/download/continuous/MacPassHTTP-continuous.zip) or build it from source (see Readme)
  2. Unzip
  3. Start MacPass and open Preferences
  4. Go to Plugins Section
  5. Drag the MacPassHTTP.mplugin file on the left table
  6. Restart MacPass by selecting it in the options
  7. You should see MacPassHTTP in Preferences.../Plugins.
  8. If the Plugin is displayed with an Alert icon check "Load unsecure Plugins" and restart MacPass again
  9. Use a browser add on to connect to MacPass - see: https://github.com/smorks/keepasshttp-connector or https://github.com/pfn/passifox depending on your browser.

Using MacPassHTTP

Connecting remotely

By default, adding MacPassHTTP on MacPass also enables remote connections (Encrypted with a 256-bit AES key; see here). This connection is an HTTP connection on port 19455. Passifox/ChromeIPass have an "advanced settings" menu which will allow you to change the IP address and port to the appropriate setting. You can use the MacPassHTTP settings to customise the port.

Details

When your extension makes a connection with your database, MacPass will display a confirmation dialog on screen.

Hit "Allow access!" to allow the connection between your extension and MacPass.

Security

According to the original plugin, KeePassHTTP transmissions are given 256-bit AES encryption, but the initial certificate exchange is done via an unencrypted connection. MacPass's authentication is done once, at the initial connection, by way of the aforementioned confirmation prompt.