I am constantly searching for the greener side. Sometimes I find one, sometimes I have to go back to the way I used to do things.

Zoho Vault is like LastPass - you provide your encryption key to the web page and it decrypts your data, you can also use an Android app. It is also completely free for personal use of a single account.

And so, having spent two months using Zoho Vault, I decided to migrate back to using KeePassX, though.

I found the web interface slightly annoying with the credential search taking a noticeable amount of time, password copy/paste depending on flash and constantly trying to mask the password that you've just unmasked to copy.

The firefox plugin was making the experience better (earlier versions would block your browser while you are logging in to Zoho, much improved now), but I again stopped feeling happy about off-loading all the keys to my kingdom to a third-party resource.

And then I also found that KeePassX has released a new major version, 2.0, making it compatible with the newer releases of KeePass Password Safe, a .NET application (which you can run under linux with mono).

KeePassX 2.0 is a substantial improvement over the 1.x version - the UI became simpler, the addition of custom tags made it easier to store related things together, and basically this is the future, so upgrade now.

/galleries/dropbox/zoho-keepassx-fake-import.png

But KeePassX also uses the new .kbdx format, and can only import the older .kdb one.

So, since I am usually going head-first without leaving an easy way back, I now had to get the data out of Zoho Vault and into KeePassX 2.

So I got the Zoho Export CSV, wrote a python script that would convert the entries to the .kdb format and then imported them into the new KeePassX 2 built in my Copr project.

Since there's currently no way to create kdbx files directly, I used the kppy module to generate the v1 database:

#!/usr/bin/python3 """Convert Zoho Vault Export CSV to KeePass KDB Usage: zohovault2keepass.py ZohoVault.csv keepass.kdb You will be prompted for the encryption password. """ import csv import collections import getpass import sys import kppy.database EXPORT_GROUP = 'Zoho Vault' ZohoVaultEntry = collections.namedtuple('ZohoVaultEntry', [ 'secret_name', 'description', 'secret_url', 'secret_data', 'notes', 'custom_data', 'tags', 'classification', 'favorite', 'chamber_name' ]) class ZohoVaultConverter(object): """Zoho Vault Converter""" def __init__(self): """Initialize converter""" self._database = None self._group = None def _prepare_db(self, path, password): """Prepare KDB database and group""" self._database = kppy.database.KPDBv1( filepath=path, password=password, new=True ) # This returns boolean, so we need to hunt for the group self._database.create_group(title=EXPORT_GROUP) for item in self._database.groups: if item.title == EXPORT_GROUP: self._group = item break if self._group is None: raise RuntimeError("Created group is not found") def convert(self, input_path, output_path, password): """Convert CSV-ish data exported from Zoho Vault to KDB""" self._prepare_db(output_path, password) entries = [] with open(input_path, 'r', encoding='utf-8') as filehandle: reader = csv.reader(filehandle) # fast-forward through the header next(reader) for row in [v for v in reader if v]: entries.append(self._process_row(row)) for entry in entries: entry["group"] = self._group self._database.create_entry(**entry) self._database.save() self._database.close() @staticmethod def _process_row(row): """Process Vault Entry""" if len(row) > 10: assert row[10] == '' entry = ZohoVaultEntry(*row[0:10]) secret_data = {} for line in [v.strip() for v in entry.secret_data.split('\n') if v != '']: key, value = line.split(':', 1) secret_data[key] = value comment = [] if entry.description.strip() != '': comment.append(entry.description) if entry.notes.strip() != '': comment.append(entry.notes) if entry.custom_data.strip() != '': comment.append(entry.custom_data) return { "title": entry.secret_name, "url": entry.secret_url, "username": secret_data.get("User Name", ''), "password": secret_data.get("Password", ''), "comment": '\n'.join(comment) } if __name__ == "__main__": if len(sys.argv) != 3: print(__doc__) sys.exit(1) converter = ZohoVaultConverter() master_password = getpass.getpass() converter.convert( sys.argv[1], sys.argv[2], master_password )

Usage:

$ pip3 install kppy
$ python3 zohovault2keepass.py ~/Downloads/zoho-export.csv zoho-export.kdb
Password: <master password>

And then use Database / Import KeePass 1 database menu entry.

while not keypressed

From Zoho Vault to KeePassX