SmartcardEncryptedKeyFile v1.2.0

Installation

Copy the attached plgx file into the KeePass installation folder or any subfolder thereof.

Requirements

• KeePass 2.59
• .Net Framework 4.8
• Windows

Release Notes

v1.2.0

• Add support for ECC key pairs (requires YubiKey minidriver)
• Fix loading PINs first remembered with v1.1.0 of this plugin
• Let user choose a card/key for decryption, if multiple allowed cards/keys are connected (before: the first one was chosen silently)

Known Issues

• Smart Card operations / unlocking an encrypted key file fails (with Exception dialog) if YubiKey Authenticator is running in parallel (note: only when using windows builtin smartcard driver, issue does not occur if YubiKey minidriver is installed)

v1.1.0

• Fix compatibility with Win11 2025-10 Update KB5066835 (#2)
• Fix remember PIN feature for some Win10 builds

Known Issues

• Smart Card operations / unlocking an encrypted key file fails (with Exception dialog) if YubiKey Authenticator is running in parallel (note: only when using windows builtin smartcard driver, issue does not occur if YubiKey minidriver is installed)
• Loading PINs first remembered with v1.1.0 of this plugin fails with message "Unsupported credential protection scheme."

v1.0.0

• Add custom PIN prompt with universal support for secure desktop
• Add remember PIN feature

Known Issues

• Incompatible with Win11 2025-10 Update KB5066835: no smartcard / yubikey found

v0.3.0

• Set owner and description of native windows PIN prompt without hacks & workarounds
  • Now using Windows API (Ncrypt) directly to decrypt Encrypted Key File (before: .Net Framework classes with limited options)
• Indicate to KeePass, that Secure Desktop is only supported on Win 10
  • KeePass shows a warning when using the plugin with secure desktop enabled and does not attempt to invoke the plugin. Before one would have been locked-in (more or less) at the secure desktop when secure desktop is enabled when the EKF plugin asks for PIN input.

Known Issues

• Secure Desktop support only for Win10

v0.2.1

• Write exported key files in KeyX v2 format (before: v1 format)
• Import key files like KeePass reads them (before: always read as binary)
  • After activating Enrypted Key File for a database, previously used key files of all kinds now remain valid and can be used as independent alternative to the Encrypted Key File when needed (before: only binary key files)

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin. You'll be locked-in (more or less) at the secure desktop when secure desktop is enabled and the EKF plugin needs to ask for a smartcard PIN. Use task manager to kill keepass if this happens.
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.2.0

• Fix Window Defender false positives on some systems
• Show Smartcard Operation Dialog (Abort option) for more smartcard operations
• Require KeePass v2.57.1

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin.
• Imported key files that are not binary (e.g. KeyX format, Hex) can't be used after the key provider has been activated for a database. A different key will be used internally. This does not happen when using binary keyfiles (i.e. files with 32byte length).
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.1.1

• Fix exception occuring when computer has not been restarted for more than 24days

v0.1.0

• Initial Release

SmartcardEncryptedKeyFile v1.1.0

Installation

Copy the attached plgx file into the KeePass installation folder or any subfolder thereof.

Requirements

• KeePass 2.59
• .Net Framework 4.8
• Windows

Release Notes

v1.1.0

• Fix compatibility with Win11 2025-10 Update KB5066835 (#2)
• Fix remember PIN feature for some Win10 builds

Known Issues

• Smart Card operations / unlocking an encrypted key file fails (with Exception dialog) if YubiKey Authenticator is running in parallel (note: only when using windows builtin smartcard driver, issue does not occur if YubiKey minidriver is installed)
• Loading PINs first remembered with v1.1.0 of this plugin fails with message "Unsupported credential protection scheme."

v1.0.0

• Add custom PIN prompt with universal support for secure desktop
• Add remember PIN feature

Known Issues

• Incompatible with Win11 2025-10 Update KB5066835: no smartcard / yubikey found

v0.3.0

• Set owner and description of native windows PIN prompt without hacks & workarounds
  • Now using Windows API (Ncrypt) directly to decrypt Encrypted Key File (before: .Net Framework classes with limited options)
• Indicate to KeePass, that Secure Desktop is only supported on Win 10
  • KeePass shows a warning when using the plugin with secure desktop enabled and does not attempt to invoke the plugin. Before one would have been locked-in (more or less) at the secure desktop when secure desktop is enabled when the EKF plugin asks for PIN input.

Known Issues

• Secure Desktop support only for Win10

v0.2.1

• Write exported key files in KeyX v2 format (before: v1 format)
• Import key files like KeePass reads them (before: always read as binary)
  • After activating Enrypted Key File for a database, previously used key files of all kinds now remain valid and can be used as independent alternative to the Encrypted Key File when needed (before: only binary key files)

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin. You'll be locked-in (more or less) at the secure desktop when secure desktop is enabled and the EKF plugin needs to ask for a smartcard PIN. Use task manager to kill keepass if this happens.
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.2.0

• Fix Window Defender false positives on some systems
• Show Smartcard Operation Dialog (Abort option) for more smartcard operations
• Require KeePass v2.57.1

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin.
• Imported key files that are not binary (e.g. KeyX format, Hex) can't be used after the key provider has been activated for a database. A different key will be used internally. This does not happen when using binary keyfiles (i.e. files with 32byte length).
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.1.1

• Fix exception occuring when computer has not been restarted for more than 24days

v0.1.0

• Initial Release

SmartcardEncryptedKeyFile v1.0.0

Installation

Copy the attached plgx file into the KeePass installation folder or any subfolder thereof.

Requirements

• KeePass 2.57.1
• .Net Framework 4.8
• Windows

Release Notes

v1.0.0

• Add custom PIN prompt with universal support for secure desktop
• Add remember PIN feature

Known Issues

• Incompatible with Win11 2025-10 Update KB5066835: no smartcard / yubikey found

v0.3.0

• Set owner and description of native windows PIN prompt without hacks & workarounds
  • Now using Windows API (Ncrypt) directly to decrypt Encrypted Key File (before: .Net Framework classes with limited options)
• Indicate to KeePass, that Secure Desktop is only supported on Win 10
  • KeePass shows a warning when using the plugin with secure desktop enabled and does not attempt to invoke the plugin. Before one would have been locked-in (more or less) at the secure desktop when secure desktop is enabled when the EKF plugin asks for PIN input.

Known Issues

• Secure Desktop support only for Win10

v0.2.1

• Write exported key files in KeyX v2 format (before: v1 format)
• Import key files like KeePass reads them (before: always read as binary)
  • After activating Enrypted Key File for a database, previously used key files of all kinds now remain valid and can be used as independent alternative to the Encrypted Key File when needed (before: only binary key files)

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin. You'll be locked-in (more or less) at the secure desktop when secure desktop is enabled and the EKF plugin needs to ask for a smartcard PIN. Use task manager to kill keepass if this happens.
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.2.0

• Fix Window Defender false positives on some systems
• Show Smartcard Operation Dialog (Abort option) for more smartcard operations
• Require KeePass v2.57.1

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin.
• Imported key files that are not binary (e.g. KeyX format, Hex) can't be used after the key provider has been activated for a database. A different key will be used internally. This does not happen when using binary keyfiles (i.e. files with 32byte length).
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.1.1

• Fix exception occuring when computer has not been restarted for more than 24days

v0.1.0

• Initial Release

SmartcardEncryptedKeyFile v0.3.0

Installation

Copy the attached plgx file into the KeePass installation folder or any subfolder thereof.

Requirements

• KeePass 2.57.1
• .Net Framework 4.8
• Windows

Release Notes

v0.3.0

• Set owner and description of native windows PIN prompt without hacks & workarounds
  • Now using Windows API (Ncrypt) directly to decrypt Encrypted Key File (before: .Net Framework classes with limited options)
• Indicate to KeePass, that Secure Desktop is only supported on Win 10
  • KeePass shows a warning when using the plugin with secure desktop enabled and does not attempt to invoke the plugin. Before one would have been locked-in (more or less) at the secure desktop when secure desktop is enabled when the EKF plugin asks for PIN input.

Known Issues

• Secure Desktop support only for Win10

v0.2.1

• Write exported key files in KeyX v2 format (before: v1 format)
• Import key files like KeePass reads them (before: always read as binary)
  • After activating Enrypted Key File for a database, previously used key files of all kinds now remain valid and can be used as independent alternative to the Encrypted Key File when needed (before: only binary key files)

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin. You'll be locked-in (more or less) at the secure desktop when secure desktop is enabled and the EKF plugin needs to ask for a smartcard PIN. Use task manager to kill keepass if this happens.
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.2.0

• Fix Window Defender false positives on some systems
• Show Smartcard Operation Dialog (Abort option) for more smartcard operations
• Require KeePass v2.57.1

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin.
• Imported key files that are not binary (e.g. KeyX format, Hex) can't be used after the key provider has been activated for a database. A different key will be used internally. This does not happen when using binary keyfiles (i.e. files with 32byte length).
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.1.1

• Fix exception occuring when computer has not been restarted for more than 24days

v0.1.0

• Initial Release

SmartcardEncryptedKeyFile v0.2.1

Installation

Copy the attached plgx file into the KeePass installation folder or any subfolder thereof.

Requirements

• KeePass 2.57.1
• .Net Framework 4.8
• Windows

Release Notes

v0.2.1

• Write exported key files in KeyX v2 format (before: v1 format)
• Import key files like KeePass reads them (before: always read as binary)
  • After activating Enrypted Key File for a database, previously used key files of all kinds now remain valid and can be used as independent alternative to the Encrypted Key File when needed (before: only binary key files)

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin. You'll be locked-in (more or less) at the secure desktop when secure desktop is enabled and the EKF plugin needs to ask for a smartcard PIN. Use task manager to kill keepass if this happens.
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.2.0

• Fix Window Defender false positives on some systems
• Show Smartcard Operation Dialog (Abort option) for more smartcard operations
• Require KeePass v2.57.1

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin.
• Imported key files that are not binary (e.g. KeyX format, Hex) can't be used after the key provider has been activated for a database. A different key will be used internally. This does not happen when using binary keyfiles (i.e. files with 32byte length).
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.1.1

• Fix exception occuring when computer has not been restarted for more than 24days

v0.1.0

• Initial Release

SmartcardEncryptedKeyFile v0.2.0

Installation

Copy the attached plgx file into the KeePass installation folder or any subfolder thereof.

Requirements

• KeePass 2.57.1
• .Net Framework 4.8
• Windows

Release Notes

v0.2.0

• Fix Window Defender false positives on some systems
• Show Smartcard Operation Dialog (Abort option) for more smartcard operations
• Require KeePass v2.57.1

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin.
• Imported key files that are not binary (e.g. KeyX format, Hex) can't be used after the key provider has been activated for a database. A different key will be used internally. This does not happen when using binary keyfiles (i.e. files with 32byte length).
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.1.1

• Fix exception occuring when computer has not been restarted for more than 24days

v0.1.0

• Initial Release

SmartcardEncryptedKeyFile v0.1.1

Installation

Copy the attached plgx file into the KeePass installation folder or any subfolder thereof.

Requirements

• KeePass 2.44
• .Net Framework 4.8
• Windows

Release Notes

v0.1.1

• Fix exception occuring when computer has not been restarted for more than 24days

v0.1.0

• Initial Release

SmartcardEncryptedKeyFile v0.1.0

Installation

Copy the attached plgx file into the KeePass installation folder or any subfolder thereof.

Requirements

• KeePass 2.44
• .Net Framework 4.8
• Windows

Release Notes

• Initial Release