# Sharing a Group (or Entry) with KeePassXC using KeeShare

**URL:** <https://hub.infinito.nexus/t/sharing-a-group-or-entry-with-keepassxc-using-keeshare/302>\
**Category:** Tutorials\
**Created:** [October 31, 2025, 7:17am UTC](https://hub.infinito.nexus/t/sharing-a-group-or-entry-with-keepassxc-using-keeshare/302 "2025-10-31T07:17:49Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![kevinveenbirkenbach](https://hub.infinito.nexus/user_avatar/hub.infinito.nexus/kevinveenbirkenbach/32/7_2.png) [@kevinveenbirkenbach](https://hub.infinito.nexus/u/kevinveenbirkenbach)\
**Post date:** [October 31, 2025, 7:17am UTC](https://hub.infinito.nexus/t/sharing-a-group-or-entry-with-keepassxc-using-keeshare/302/1 "2025-10-31T07:17:49Z")

</div>

### Introduction

If you want to securely share selected passwords (or groups of passwords) with other team members while using KeePassXC, the built-in **KeeShare** feature is your best option. Rather than sharing your full database (with all entries), KeeShare lets you share _just a subset_ (a group) with designated access. [GitHub+2Medium+2](https://github.com/keepassxreboot/keepassxc/blob/develop/docs/topics/KeeShare.adoc?utm_source=chatgpt.com)  
This article walks through the setup and best practice steps.

* * *

### Step 1: Enable KeeShare in global settings

 ![71e12602-b01a-4666-92a1-7ab38713847b](https://hub.infinito.nexus/uploads/default/original/1X/9edc2e35018f3dad093dfc45fc158b2e5c88fb7b.png)

1. Open KeePassXC → **Tools → Settings → KeeShare** (or **Extras → KeeShare Einstellungen** , depending on locale).
2. Check the boxes:

- **Allow import** – to allow this installation to import shared groups.
- **Allow export** – to allow this installation to export groups for sharing.
- Optionally: enable **signed shares** and **encrypted shares** (recommended).

1. Generate your personal certificate/signing key if prompted (you’ll see a “Signer” name + fingerprint).  
[Medium+1](https://medium.com/%40lior.dux/keepassxc-sharing-disaster-recovery-65c6076e7394?utm_source=chatgpt.com)
2. Click OK/Apply and **restart KeePassXC** (to ensure the new tab appears).

> Best practice: Use a unique signer name (e.g., `YourName-TeamShare`) and keep the fingerprint available for your team so they can verify your shares.

* * *

### Step 2: Create a dedicated group to share

1. In your database, right-click on a parent group (or root) → **New Group…**
2. Name it appropriately (e.g., `PR-Shared`, `Infra-Shared`).
3. Move the entries you intend to share into this group.

> Why: Sharing at the group level ensures you have clear boundaries about what is shared. Many users mistakenly try to share a single entry, but KeeShare works with groups. [Reddit+1](https://www.reddit.com/r/KeePass/comments/11by8la/how_does_keeshare_work_in_keepassxc/?utm_source=chatgpt.com)

1. (Optional) Set an icon or color to visually mark this group as “shared”.

* * *

### Step 3: Configure the group for sharing

 ![6a55869c-7e57-4810-a5aa-574f78c24f4f](https://hub.infinito.nexus/uploads/default/original/1X/373e4af86993f8df66b80e6217175eb0bb9c1a28.png)

1. Right-click the new group → **Edit Group…**
2. In the left sidebar of the dialog, click **KeeShare**.
3. Set **Type** :

- `Export` → you are the sharer (others will import).
- `Import` → you will import from others.
- `Synchronize` → two-way sync (less common for shared secrets).

1. For `Export` type:

- **Path** : specify where the share file goes, e.g., `/home/youruser/Nextcloud/KeeShare/PR-Team.share` or `\\fileserver\share\pr-team.share`.
- **Password** : set a strong password for this share file (if using encryption).

1. Click **OK** to save. KeePassXC will create the `.share` file (or whatever you named it) in the target path.  
[Medium](https://medium.com/%40lior.dux/keepassxc-sharing-disaster-recovery-65c6076e7394?utm_source=chatgpt.com)

> Best practice: Store the share file on a **sync platform** such as Nextcloud, Syncthing, or a versioned network share. Everyone in your team accesses the same path to keep things consistent. [txtechnician](https://txtechnician.com/blog/tech-tips-2/keeshare-how-to-share-passwords-between-databases-using-keepassxc-33?utm_source=chatgpt.com)

* * *

### Step 4: Share the file with your team

- Confirm that the `.share` file is present and synced in the shared location.
- Inform your team of the path **and** the share password (if set).
- Also provide your **signer fingerprint** so they can verify the share’s authenticity.

* * *

### Step 5: Team members import or sync

For each team member:

1. In their KeePassXC installation (with Allow import checked):

- Right-click on the group in which they want the shared entries → **Edit Group…**
- Go to the KeeShare tab.
- Set **Type** = `Import`.
- **Path** = the shared file path (same as above).
- Enter the share password (if any).

1. Click OK → KeePassXC will import the shared entries into that group.
2. Going forward: When the owner updates entries in the export group, and the share file is updated/synced, team members will receive updates when they open or sync their database.

* * *

### Best Practice Guidance & Caveats

- Use groups (not individual entries) for sharing — simpler and less error-prone.
- Use a **dedicated share group** per team or topic (e.g., `PR-Team`, `Infra`, `Admin`) to control access and rotation.
- Always store the share file in a **versioned, secure sync location** (Nextcloud with file history, etc.).
- Use **strong unique passwords** for the share file if encryption is enabled.
- Consider **signed shares** to verify sender identity.
- Remember: KeeShare is _not_ a full enterprise secret-manager. For advanced delegation, audit logs, or temporary access, a dedicated tool may be preferable. [txtechnician](https://txtechnician.com/blog/tech-tips-2/keeshare-how-to-share-passwords-between-databases-using-keepassxc-33?utm_source=chatgpt.com)
- Note: Some users report quirks (e.g., groups not syncing) — test your setup. [GitHub](https://github.com/keepassxreboot/keepassxc/issues/11593/linked_closing_reference?reference_location=REPO_ISSUES_INDEX&utm_source=chatgpt.com)

* * *

### Summary

By following these steps, you establish a secure, controlled way to share selected credentials with team members via KeePassXC’s KeeShare. You retain control over what is shared, ensure encryption and signing, and avoid sharing full master passwords or entire vaults.