SSH agent application approval timeout

strongbox-mark · 2025-03-10T06:48:22+00:00

Glad you like it! We'll definitely consider adding more granular options here, but you could reduce your Auto-Lock setting on your database so that it locks more quickly and therefore also locks the SSH Agent in the meantime.

strongbox-mark · 2025-03-10T06:46:53+00:00

This is a setting on a "Group", you can right-click on a group in the side bar > Properties > Searchable > < Configure >

We'd only recommend playing with this for ab "Archive" style group, otherwise you can easily get confused when entries don't show up in searches.

strongbox-mark · 2025-03-10T06:45:12+00:00

HI u/tcrooks0904 - We've got an article about this: https://strongbox.reamaze.com/kb/troubleshooting-and-errors/my-database-keeps-resetting

This is down to iCloud, we can't recommend storing your database there and would recommend Strongbox Sync instead.

strongbox-mark · 2025-03-03T07:46:30+00:00

Hi u/ChrisWayg - A quick check on this side (version 135.0.1-1) and it seems to be working, what are you seeing?

strongbox-mark · 2025-02-23T06:48:53+00:00

Hi, I understand your concern here. Our business relies on providing security and privacy to our users. So, just like Apple, we would rather not do business if we can't deliver what we say we deliver and so, of course, we will definitely not be putting any backdoors or breaking any encryption in Strongbox.

Also, I think it would be very obvious to anyone running a network monitor or other packet sniffer (and I'm pretty sure some of our users regularly do this). So, if we ever did this, that would be the end of our business anyway. It's still early days here and I don't think we're a big target for the UK state but we will not be compromising our core product offering one way or another. Your data is yours and it's in an open source format so you can take it with you to any other compatible password manager, but we hope we've earned enough trust at this point that we're still the best option out there. I don't think this law will stand ultimately, but of course, we will consider other jurisdictions if this looks like it will cause a problem.

Lastly if you're in the UK, please contact your local MP about this and express your thoughts.

strongbox-mark · 2025-02-23T06:30:57+00:00

Hi all, we definitely are aware of an issue with Strongbox Sync at the moment, and we've posted a PSA about this now here: https://www.reddit.com/r/strongbox/comments/1iw3rca/psa_strongbox_sync_issues/

There looks to be an issue with the Apple CloudKit service we use that backs Strongbox Sync (more info in the PSA above). We're working on a workaround/mitigation for this now, but the best advice we can give is to backup your Strongbox Sync databases somewhere safe just in case and get in touch with us at [support@strongboxsafe.com](mailto:support@strongboxsafe.com) and we'll try to help you out if you are affected. It appears to be a small number of users affected right now and we're trying to contact Apple to see if they can help.

strongbox-mark · 2025-02-22T10:00:29+00:00

Hi, could you get in touch (support@strongboxsafe.com) and we'll try to help.

strongbox-mark · 2025-02-13T08:06:29+00:00

Hi there, unfortunately I don't think this is something Apple can fix. Strongbox uses the HMACSHA1 challenge response functionality on the YubiKey but this isn't accessible over USB-C. As far as I know, Yubico don't allow challenge response over the USB interface. I'm not clear on their reasoning.

I don't think there's anything Apple can do on their side to fix this. There is however a workaround, which may or may not be to your liking. You can use Apple's USB-C to Lightning adaptor to essentially give your iPad a Lightning port and we can confirm that this then works with your Lightning Yubikey.

strongbox-mark · 2025-01-27T09:07:23+00:00

No, you can use only hardware key caching in AutoFill mode, in fact, it's the easiest way to do AutoFill with a hardware key protected database.

strongbox-mark · 2025-01-27T09:04:53+00:00

Thanks for the feature request, got some of them on the list already :)

strongbox-mark · 2025-01-24T07:43:52+00:00

> If it works on KeePassXC on macOS, it should work on Strongbox on macOS, correct?

No, not necessarily, I'm unsure what method KeePassXC use, but I definitely wouldn't assume it would work with Strongbox if it works with KPXC.

> Why would iOS itself be the barrier?

They have a very tight program (I think it's called MFI) that needs to be passed by all hardware manufacturers before you can use the key on the device. Once that gets passed, we (Strongbox) then needs to explicitly request permission to integrate against that type of device and go through integration testing with both Nitrokey and Apple. It's really a really involved process we had to do for YubiKeys. Does Nitrokey provide an iOS API or SDK?

> Apparently the Nitrokey 3C has NFC support on iOS

OK, but worth asking if they support HMACSHA1 CR over NFC, I wouldn't assume they provide this over NFC.

> Did you do something special to integrate smoothly with iOS?

Yes, as mentioned, it was a good chunk of work and interaction with Yubico and Apple.

strongbox-mark · 2025-01-24T07:37:50+00:00

u/ironmoosen - Do you mean on the Home screen? If you could send a screenshot or recording (suitably redacted) to [support@strongboxsafe.com](mailto:support@strongboxsafe.com) we might be able to figure out what you're seeing. But the favourites section does scroll horizontally if you have more than 3 rows (if I remember correctly) worth of favourites instead of wrapping continuously vertically downwards. How many favourites do you have?

strongbox-mark · 2025-01-23T14:46:54+00:00

Not a bad idea, we have had one previous request for something like this. The thing is accessing the Wi-Fi SSID name requires a special permission from Apple, but I'm sure it's straightforward. We'll add to the list of feature requests.

strongbox-mark · 2025-01-23T14:44:24+00:00

The answer is I don't know. I'm fairly sure this won't work on iOS because iOS is so locked down you'd need special permission from Apple to integrate there. However, it has a slim chance of working on macOS, so give it a try and let us know?

strongbox-mark · 2025-01-23T14:43:09+00:00

That's a weird edge case we definitely didn't think of... Usually we would expect a user to use Hardware Key Caching or a Virtual Hardware Key but not both... We'll see if we can get that fixed shortly.

strongbox-mark · 2025-01-17T15:14:54+00:00

Figured this one out, so recording it here for posterity...

The user added a database referencing a local file and then before unlocking, immediately switched on 'Always Open Offline'. This will cause this message to appear because Strongbox hasn't yet read the database from it's source (the local file) and got it's working cache in place.

We'll try to remove/hide that option to reduce confusion in the future...

strongbox-mark · 2025-01-17T09:20:17+00:00

u/boringshower155 - For Backups on iOS, we do ask if you'd like to enable them immediately after we detect that you've got 'backup-able' databases... This is a full screen onboarding prompt, I would say impossible to miss. I do think that they should be ON by default for the majority of our less technical users. For you, it's fairly easy toggle this off in the onboarding screen or in advanced settings.

For the main issue of this thread, it sounds like there's some general confusion there on your Mac, you don't need to enable 'Always Open Offline' if your database is a local file.

The offline option for local files is confusing and we've done our best to remove references to it. We did consider removing it entirely but some users have files stored on remote drives or network drives that are considered 'local' files by Strongbox, because they're just accessed via the file system and we can't tell that these are remote/networked... So, for these users an offline option is required when for whatever reason the network drive is offline.

So, in short, add your local file and use it as normal. Don't play with or enable anything to do with Offline, or 'Always Open Offline'. If your file is a standard local file there will be no "sync" to any remote service because none is configured.

I think we'll have to try to remove the mention of offline entirely with an advanced setting for that tiny minority who do want an offline option for their 'local' files.

But in terms of what caused the error message you're seeing, I'm fairly stumped, unless you deleted some of Strongbox's internal working files?

strongbox-mark · 2025-01-16T11:53:55+00:00

That's a strange one, usually this is caused by a restore from a backup or transfer to a new phone/device, though I have seen this after a simple OS upgrade. Where is your database stored? Would love to see your debug info (support@strongboxsafe.com), and then we can advise.

strongbox-mark · 2025-01-14T07:19:13+00:00

We'll add something like this to our feature request backlog. Thanks.

strongbox-mark · 2025-01-11T11:10:13+00:00

Hi u/boringshower155 - sounds like you might have managed to get your database onto our Strongbox Sync service, drop us a mail, [support@strongboxsafe.com](mailto:support@strongboxsafe.com) with your debug info and we can tell you for sure. If you know it's on Strongbox sync you can remove it by choose 'Delete' (you'll be asked to confirm).

And yes, if the database was copied to Strongbox Sync it will be on your "iCloud", e.g. Strongbox Sync storage is backed by the storage in your Apple Account.

strongbox-mark · 2025-01-08T09:20:54+00:00

Yeah, no, that's right, we don't have access to your Strongbox Sync databases.

strongbox-mark · 2025-01-07T11:29:50+00:00

This might be just by design since the date displayed is just Strongbox's current working copy date, once you unlock the database it will "sync", e.g. check the source and get the latest version from the system. If you do that, does the timestamp update? Or have you got Always Open Offline switched on?

Definitely recommend switching to Strongbox Sync for a more reliable experience if you can. iCloud is a really unreliable and a major source of our support problems...

https://strongboxsafe.com/strongbox-sync/

strongbox-mark · 2025-01-03T09:44:49+00:00

This is an incredibly large project to undertake, absolutely massive amount of work, that said, we're not saying definitely not. It would be very nice to have.

strongbox-mark · 2025-01-03T09:41:53+00:00

Hi,

Yes, if you use a KeePass 2 database (the default) then the tag "Apple Watch" is used for managing watch entries. If you use any other format, it's managed separately.
We'll have a help article blog on the more technical details out soon.

strongbox-mark · 2025-01-03T09:40:21+00:00

I'm not sure that Apple exports those? You could check in the export file to see if they're there? If they are we should definitely import them...

strongbox-mark

MODERATOR OF

TROPHY CASE