Home - New Database

In Password Depot, you have different options to create a new database:

  • Click on Database → New database.
  • Click on Home → button New database.
  • Click on Home → Local system → New database.

The New database wizard guides you through four steps to create a new database.

Step 1: Welcome

Choose a name and storage location for your database.

  • Database name: Enter a valid file name without path and file extension, e.g. "My passwords". The database will be saved under the name specified here with the file extension ".pswe", so that you can easily find it again later.
  • Storage location: Select the storage location for the database. Available locations include the local system, cloud services (Dropbox, Google Drive, OneDrive, Box, HiDrive), and Internet server (FTP/WebDAV/HTTP). Click the New button to add a new storage location.

Click Next > to continue.

Step 2: Encryption

Specify encryption options for your database.

  • Protected by: Choose from three different methods for protecting the database:
    • Master password: The conventional and – depending on the complexity of the password – secure method for encrypting a database with a master password.
    • Master password and key file: The database is protected with a master password and, in addition, a key file.
    • Key file: The database is protected exclusively with a key file. Key files contain complex keys that are very secure and cannot be cracked even by brute-force attacks. However, keep in mind that anyone who has access to both your key file and your database can access your passwords! Therefore, treat the key file like a real "safe key" and always keep it in a secure place (e.g. on a USB stick).
  • Master password: Enter your desired master password here. You will need this password to open your database. The following buttons are available next to the input field:
    • Show/Hide Password (eye icon): Toggles the password display between masked and plain text.
    • Generate master password (asterisk icon): Opens the Master Password Generator to create a particularly secure password.
  • Confirm master password: Repeat the master password you entered previously. Both entries must be identical, otherwise the password will not be accepted.
  • pwned? Use this button to check whether similar passwords have been compromised in the past.
  • Password quality: A colored bar indicates the strength of your password. The larger the bar, the more secure your password. Never use passwords for which the bar is shown in red – stick to green or blue bars.
  • Key file: This field is available when you have selected Master password and key file or Key file as the protection method. The following buttons are available next to the input field:
    • Open key file: Select an existing key file.
    • Generate key file: Opens the Key File Generator to create a new key file.

WARNING: If you forget your master password and you have not specified a decryption hint, or the hint does not help you, there is NO way to view the passwords in the affected database! Therefore, use a password that you can easily remember.

Click Next > to continue.

Step 3: Security Settings

Here you can define the encryption algorithm as well as the key derivation function (KDF) and its parameters.

Under Algorithm / Mode, you can choose from the following options via the drop-down menu:

  • AES / GCM (recommended for new databases): AES in Galois/Counter Mode is a modern encryption method that provides both data confidentiality and integrity in a single step. New databases use AES-GCM by default.
  • AES / CBC (deprecated algorithm): AES in Cipher Block Chaining Mode is the older encryption method used in earlier versions of Password Depot. This option is available for compatibility with existing databases.

NOTE: Databases encrypted with AES-GCM cannot be opened with Password Depot 19.1.0 or earlier. Make sure that all devices on which this database is to be used have a newer version of Password Depot installed.

A key derivation function (KDF) is a technical protection mechanism that derives the actual encryption key for your database from your master password. This process is intentionally designed to be computationally expensive so that attackers cannot quickly try out master passwords in an automated manner – an approach known as a brute-force attack. The more demanding the key derivation, the better your database is protected against such attacks.

Under KDF algorithm, you can choose from the following options via the drop-down menu:

  • PBKDF2-HMAC-SHA1: An established and widely used algorithm for key derivation. If this option is selected, the following field appears:
    • Iterations: Indicates how often the calculation is performed to derive the key. The higher the value, the longer the calculation takes – both for you when opening the database and for potential attackers. The default value is 600,000 iterations, which is also the currently recommended minimum.
  • Argon2id: A modern algorithm that is today considered the industry standard for key derivation. In addition to computational effort, it also requires working memory, which makes attacks with specialized hardware such as GPUs significantly harder. If this option is selected, the following fields appear:
    • Memory (KB): Defines how much working memory is used for the calculation. A higher value improves protection against brute-force attacks using specialized hardware. The default is 65,536 KB; recommended is 65,536 KB (64 MB) or higher.
    • Iterations (time cost): Defines how often the calculation is performed. The higher the value, the longer the calculation takes – both for you when opening the database and for potential attackers. The default value is 3, which corresponds to the recommended minimum.
    • Parallelism: Specifies the number of parallel lanes (threads) used for the calculation. Lanes are independent computation paths that can be processed simultaneously; the value typically corresponds to the number of available CPU cores. The default value is 4, which is a typical value.

Click the Benchmark button to the right of the drop-down menu to test how long the key derivation takes on your device with the currently selected parameters. The measured duration is then displayed in seconds, along with an assessment of whether the chosen parameters offer a good balance between security and usability or whether an adjustment would be advisable. This way, you can optimally tune the settings to your device and your requirements.

Click Next > to continue.

Step 4: Finish

Your database is almost ready. Here you can add comments and a decryption hint.

  • Comment: Optionally enter comments about the database.
  • Decryption hint: Enter a hint that could serve as a reminder if you forget your password.

NOTE: For security reasons, neither the decryption hint nor the comment may contain the master password.

Click Finish to complete the creation of the database.