Post #3483711
2026-06-30 04:51 UTC
@nothacking@infosec.exchange what about using the tpm as second factor? So I can use a shorter passphrase in daily use but have a second long key for recovery?
Replies (1)
-
@nothacking@infosec.exchange 2026-06-30 05:06
@lichtfeind@chaos.social Yes. Generally the way that works is that the TPM verifies the password, so it's theoretically insecure against hardware attacks to the actual chip... but those are extremely rare and difficult. In real life situations, it's practically identical to password based encryption but less work. (Just make sure you hold on to that recovery key)