# Keepass-As-Group

> [!toc] Table of Contents
>
> <!-- toc -->

KeePassXC is not actually cloud software, which is one of the reasons it is so popular -
none of your passwords ever leave your own computer. However, this makes it impractical
for managing different logins as a group. Every time a change is made to the database,
_(new password added, password changed, etc.)_ everyone has to be notified of the
changes so that they can apply them locally.

However, similar to cloud-based password managers such as Bitwarden, we can also keep a
KeePassXC database automatically synchronized across different computers, while still
opening and editing the database as usual with KeePassXC.

This requires a working cloud environment for your group to be set up. We would
recommend Nextcloud, as it's not only open source, but is also hosted by various very
nice tech collectives, meaning you don't have to set NextCloud up yourself. See our
instructions on [Nextcloud groups](https://wiki.aktivismus.org/instructions/nextcloud.md#account-management) and
[device synchronization](https://wiki.aktivismus.org/books/it-sicherheit-esc-it/page/nextcloud-webdav) for more information on
using NextCloud.

After successful installation and setup, each member of your group should have direct
access to all of your cloud files locally, i.e. directly on the computer.

## Sharing the password database (and other files)

Now, the group password database, _hereinafter referred to as “the database”_, is
uploaded from the **group account** to your own files:

![database upload](https://esc-it.org/assets/articles/en/instructions/nextcloud/wi-files-1-_upload.png)

### Share file

- Click on the `Share` icon _(or on `Details` under the three dots)_:

![database upload](https://esc-it.org/assets/articles/en/instructions/nextcloud/wi-files-2-_share_icon.png)

- Enter the name of the team in the search field and select the team _(the name may need
  to be written out in full)_:

![database upload](https://esc-it.org/assets/articles/en/instructions/nextcloud/wi-files-2-_share_with_group_1.png)

- Give the group editing rights _(otherwise the team members will not be able to edit
  the file, which is necessary, if they should be able to add, or change passwords
  e.g.)_:

![allow editing button](https://esc-it.org/assets/articles/en/instructions/nextcloud/wi-files-2-_share_with_group_2.png)

Here you can now see who has access to this resource:

![sharing info of file](https://esc-it.org/assets/articles/en/instructions/nextcloud/wi-files-2-_share_with_group_3.png)

All team members should now have access to this database in the files of their own
accounts. (See
[this graphic](https://esc-it.org/assets/articles/en/instructions/nextcloud/fileshare-concept.svg), that
explains how shared files are accessed from different accounts)

## Open shared database

- In KeePassXC, select `Open database` in the bar at the top left.

![open database in KeePassXC](https://esc-it.org/assets/articles/en/instructions/nextcloud/kp-open-database.png)

- In the window that opens, select the shared database from the Cloud folder.

![select database from file manager](https://esc-it.org/assets/articles/en/instructions/nextcloud/kp-select-database.png)