Crypt and decrypt password

[christophberger]

@Andrea_De_Pinto

but also with Keepass someone could has the password to access to the file is not so safe

That’s true, and the only way to make a Keepass database safe is to make the master password as long and as unguessable as possible.

@Andrea_De_Pinto

I can create a method to regenerate new keys every days and store it somewhere where only superuser can access and launch the procedure only by it and the request for the password by the users should be traced and allowed by logging.

I guess this works only as long as the superuser account is not compromised and the superuser is a trusted person.

But that’s only my $0.02, and I believe this is not helpful at all. After all, I am not a security expert (far from it! - just someone interested in that topic), so you might want to find a security forum somewhere, to get more helpful answers to your questions.