Linux

48077 readers

757 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago

MODERATORS

[email protected]

How do I get rid of excessive password prompts, with the least amount of lost security? (lemmy.world)

submitted 11 months ago* (last edited 11 months ago) by [email protected] to c/[email protected]

24 comments fedilink hide all child comments

I understand they are important and are what makes linux relatively secure compared to windows.

However, when I boot my PC, I don't want to spend a whole minute to type my password into different promts that keep getting hidden behind other windows that are starting up. I am using Nobara KDE now, but previously when I was using Pop!_OS, none of these prompts showed up.

Currently I have 2 prompts after logging on. One for my keychain when discord autostarts, and one for flatpak when gpu-screen-recorder launches. Interestingly, discord works just fine, with auto logon, regardless of whether the keychain prompt gets canceled or filled with the password.

Any idea on how to get rid of them? I'd prefer if really only that startup prompt was gone, and it would still ask me for the password whenever it launches any other way.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 5 points 11 months ago (2 children)

Personally, I've relied on an OnlyKey for a few years (with backups and an extra fallback device) and haven't needed to type passwords since. This doesn't help with the number of prompts, but it does make them easier to dismiss.

I do use autologin, but I don't use a system wallet (only KeePassXC, which I do need to unlock manually). Autologin with system wallets can be tricky, but I've had some luck setting it up in the past. You might want to check out this wiki for PAM configuration.

[–] [email protected] 2 points 11 months ago* (last edited 11 months ago) (1 children)

hmm, interesting idea for sure. I think I would just leave it plugged in 24/7 though so I think I'll skip this one for now.

[–] [email protected] 1 points 11 months ago

Yeah for me it's been great and I do essentially leave it plugged in the whole time I'm using my PC (attached to my keys). It does require a pin entered each boot, so leaving it in would still offer security. But as someone else mentioned getting kwallet PAM working would make things easier in any case

[–] [email protected] 1 points 11 months ago (2 children)

may I ask how do you unlock it manually? Like what do you have to type in, specifically? /s

[–] [email protected] 6 points 11 months ago* (last edited 11 months ago) (1 children)

****************************

[–] [email protected] 2 points 11 months ago* (last edited 11 months ago) (1 children)

That's so cool! I did not know that Lemmy would automatically put in stars when you type a password!

****************

Damn that's cool!

[–] [email protected] 4 points 11 months ago (1 children)

hunter2

[–] [email protected] 5 points 11 months ago (1 children)

Hey wait why does it still show for me

[–] [email protected] 3 points 11 months ago

*******

Just shows stars on my screen.

[–] [email protected] 1 points 11 months ago

Lol. I press a button on the device (which I unlocked with a pin before boot), but it would be nice to have the DB unlock automatically