User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking @star@amazonawaws.com
11mo
explain to me: why do I need to encrypt my passwords store/keyring on linux, if my drive is encrypted anyway?
3
0
5
0
User avatar
Alexia ΘΔ @alexia@app.wafrn.net
11mo
ah, well if the system is live then the keyring could just be read (the security on many of these keyring managers tends to be laughable)
2
0
1
0
User avatar
Alexia ΘΔ @alexia@app.wafrn.net
11mo
this doesn't apply to sandboxed applications (i.e flatpaks) that use the freedesktop portals API to get secrets, but it does to everything else
0
0
1
0
User avatar
LiquidParasyte @liquidparasyte@app.wafrn.net
11mo
The default configuration of those secret mangers should be encrypted, I think,
1
0
0
0
User avatar
Alexia ΘΔ @alexia@app.wafrn.net
11mo
it should be, but often it either isn't or only poorly.


None of them can use TPM to store the keys, and none of them will use a separate password by default; Kwallet encrypts it with the user password by default (changeable tho) and gnome-keyring doesn't give you the option to change it to smth else IIRC
0
0
1
0
User avatar
Lyn @fugi@chaos.social
11mo
@star I'm wondering the same currently, it seems like on single-user systems with full disk encryption, there is no benefit. According to the arch wiki, at least Gnome Keyring is not that secure anyway once unlocked.

FYI: if you are using Gnome + gdm + gnome keyring, it should be possible to auto unlock using your LUKS password
1
0
1
0
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking @star@amazonawaws.com
11mo
@fugi the issue i am currently experiencing is that i changed my password with passwd and now, when I log out from my session and lock back in, two different keyring UIs pop up, each wanting my password. this is a single user system so bleh
1
0
1
0
User avatar
Lyn @fugi@chaos.social
11mo
@star ugghhh 😵‍💫 have you tried changing the (both) keyrings' passwords to your new one?
1
0
0
0
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking @star@amazonawaws.com
11mo
@fugi funnily enough, i don't even know what the second keyring application is. I just set my password store to unencrypted for now. :/
0
0
1
0
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking @star@amazonawaws.com
11mo
such a hassle, especially when shit breaks and you get asked for your password every bootup
0
0
3
0