Post #3310268

2026-06-13 16:19 UTC

Since in most cases the keyring is unlocked on login, this seems like a small hurdle to overcome, right? I am trying to figure out if there is something I fundamentally misunderstand about the keyring or if it’s that trivial (and insecure).

Replies (3)

@CallMeAl@piefed.zip 2026-06-13 16:27

is something I fundamentally misunderstand about the keyring… Keyrings like GNOME Keyring support setting it to auto-lock after a timeout. That would be the way to use it, IMO.

Open ##3310331
@Tetsuo@jlai.lu 2026-06-13 16:29

I think you understand correctly. Your setup seems quite insecure considering your keyring seems to be always open and that you use a password that is already used to login. On the other hand a keyring can be unlocked only when used and could also have it’s own dedicated password for it. Security is more a gradient than something binary. Also if you store keys that are particularly sensitive in it they are as vulnerable as the container that stores them. Not blaming you of anything of course, I think you are asking the right questions. 👍

Open ##3310351
@atzanteol@sh.itjust.works 2026-06-13 17:26

KDE requires giving permissions to an app that wants to access kwallet also. I’m sure gnome does something similar.

Open ##3310769