How do I get rid of excessive password prompts, with the least amount of lost security?

silly goose meekah@lemmy.world to Linux@lemmy.ml – 41 points –

I understand they are important and are what makes linux relatively secure compared to windows.

However, when I boot my PC, I don't want to spend a whole minute to type my password into different promts that keep getting hidden behind other windows that are starting up. I am using Nobara KDE now, but previously when I was using Pop!_OS, none of these prompts showed up.

Currently I have 2 prompts after logging on. One for my keychain when discord autostarts, and one for flatpak when gpu-screen-recorder launches. Interestingly, discord works just fine, with auto logon, regardless of whether the keychain prompt gets canceled or filled with the password.

Any idea on how to get rid of them? I'd prefer if really only that startup prompt was gone, and it would still ask me for the password whenever it launches any other way.

24

You are viewing a single comment

Personally, I've relied on an OnlyKey for a few years (with backups and an extra fallback device) and haven't needed to type passwords since. This doesn't help with the number of prompts, but it does make them easier to dismiss.

I do use autologin, but I don't use a system wallet (only KeePassXC, which I do need to unlock manually). Autologin with system wallets can be tricky, but I've had some luck setting it up in the past. You might want to check out this wiki for PAM configuration.

hmm, interesting idea for sure. I think I would just leave it plugged in 24/7 though so I think I'll skip this one for now.

Yeah for me it's been great and I do essentially leave it plugged in the whole time I'm using my PC (attached to my keys). It does require a pin entered each boot, so leaving it in would still offer security. But as someone else mentioned getting kwallet PAM working would make things easier in any case

may I ask how do you unlock it manually? Like what do you have to type in, specifically? /s

****************************

That's so cool! I did not know that Lemmy would automatically put in stars when you type a password!

****************

Damn that's cool!

Lol. I press a button on the device (which I unlocked with a pin before boot), but it would be nice to have the DB unlock automatically