Automount when opening keepass

[Former user]

Hi,

Is there a way to mount Volumes automatically when keepass opens? (I mean without even having to select the entry and click Ctrl-M) That would be a very convenient feature.

Thanks for your great work.

[Dominique]

Hello, I have a similar request: I use some volumes all the time and I would like them to be mounted automatically as soon as I open my Keepass vault. Even better would be to have this as an option on each Veracrypt Volume (automount, not automount, automount all)... similar to options already existing with autodismount. I do not really understand why this feature exists for 'dismount' but not for 'mount'. This improvement would be very useful and welcome. Thanks!

[Frédéric Bourqui]

I do not think this feature would be good security wise, keepass is there to store password and automate sending password to applications that needs it. The autodismount on lock is useful for making sure that all open volume are closed on lock, this is a good security practice. If you mount a lot of different volume every time you open keepass, what is the purpose of those different volumes, separate those by usage/security level, in this case it do not make sense to mount them all at startup. And regarding implementation, I do not like the fact that the plugin would have to look at all entries to see if they are veracrypt ones and if it needs to be mounted at startup, 90% or more would be regular password entries, not veracrypt ones. And I doubt every time you unlock keepass you need access to veracrypt volume, it's a password manager. On top of that if you want to use secure password autotype, it would be a mess to mount more than 2-3 volume at startup..

[Frédéric Bourqui]

Goes against security best practice

[Dominique]

Thank you for your answer. I am not sure to understand why it is not good security practice. The request was to have this feature optional as with auto dismount. It is up to the user to enable it depending on its usage scenario. In my case, I have a network disk where each user has a veracrypt volume. At startup, Keepass opens and prompt for the master password. Users always want to access their data on the network disk. Therefore, they have to mount their disk whenever they open a session. They also have all their passwords ready to browse the internet thanks to keefox. They do not see why they would have to do the extra "mount" operation for veracrypt, whereas everything is ready from the start with keefox. So, it is not necessarily the point of having many volumes to mount, but rather to have it done all the time (and by user who do not really want to bother). Any comment welcome.

[Frédéric Bourqui]

Hello, I could see some value in your use case, It could be implemented in a future release. with the option to automount 1 volume at startup, or unlock. but no more than 1 as it would be a nightmare to have to wait for several volume to automount.

[Dominique]

Thank you Frédéric. I'm glad that you re-opened the case. No limitation in the number of volumes would give more flexibility, but in practice having the feature for only one would already solve most of the cases I'm facing. I'm looking forward to it. Cheers

[Janis Pütz]

Multiple volumes would be helpful, since you cannot always merge different volumens. If you have multiple encrypted drives that you want to access all the time, you would want to make the mounting process as easy as possible, while keeping a high security.

Automation without a password database would require you to store the volume passwords unencrypted. Aka security nightmare.

[Chris]

Thanks for your work. Autmount would be a great feature !