(Note: If you see the error "secret does not match yubikey," this option hasn't been selected.) Paste the secret key generated in step 5 into the window, check Variable Length Challenge?, and click OK.Click OK, and you should see a Secret Key Entry window appear.Enter your master password, check Show expert options, check Key file / provider, and select Yubikey challenge-response from the list. You should see the Create Composite Master Key window.If you are creating a new database, initiate the process, then select your name and save location (you will be prompted to do this). If you already have an existing database, open it, then click File > Change Master Key.Run KeePass, or restart it if it was already running. zip file into the KeePass installation folder. KeeChallenge is installed by copying the contents of the.
HMAC-SHA1 is recommended over OATH-HOTP because of its ease-of-use, as well as its ability to be backed up (it is not possible to have a backup YubiKey when OATH-HOTP is used). This article covers two methods for using YubiKeys with the KeePass password manager: HMAC-SHA1 Challenge-Response and OATH-HOTP.