I do not know your reasoning behind choosing KeePass (I personally prefer it), but it sounds like your needs could be better met using LastPass that has sharing features built in. Hope you find this approach as useful as I did.

Now, when you want to open the shared database, mark the entry and press CTRL + U.

On the advanced tab create a field named DbPath and with the value of where the shared database is located.

Create an entry in your personal database with the Password for the shared database.

This process is then simplified further by this neat 'trick' I found on the KeePass forum (slightly modified/improved): We are going to use keepass2john to get the hash that john the ripper can use to retrieve the password.

This allows us to have a very secure password on our shared databases, but also requires that the different users also use secure passwords for their private databases. This guide will show you how to crack a KeePass Database file by retrieving the Master password from a Keepass database (.kdbx) file which we can use to unlock the database file to get all the passwords stored in this file. All users are then required to have a personal KeePass database wherein the key to the shared databases are stored. It's a bit messy without but ok for now.I work voluntarily on various IT related projects, where we are groups of people that share passwords, and the different groups all share their own KeePass databases via Dropbox. Would be nice if KeePass2Android was able to display the Groups in their nested folder structure. It does open the kdbx file from the Syncthing folder as well (without using KeeShare). Thanks to this post I tested KeePass2Android and that does indeed unlock the kdbx file with the Yubikey Challenge-response secret, both with an NFC swipe and also by plugging the Yubikey into the device + touch.

I would also prefer to be able to either plug my Yubikey into the Android device or use it via NFC to unlock the database. I have found that KeePassDX on Android is then able to open that kdbx file from the Syncthing folder without requiring Yubikey authentication at all. You can set it to Sync and specify your Syncthing directory. I am trying to do the exact same thing at the moment.Ī workaround might be the KeeShare Sync option that you can enable for a Group/Folder in KeepassXC.

Kdbx database