Why I Find Linux Keyrings Actually Very Useful 5 Reasons

Why I Find Linux Keyrings Actually Very Useful: 5 Reasons

If you’ve used Linux, your desktop may have reminded you to set up your keyring. Keyring apps, such as KDE Wallet or Seahorse (GNOME), automatically save things like:

• App Credentials: usernames, passwords, and login tokens for integrated apps.
• Network Secrets: Wi-Fi passwords and network authentication keys.
• Keys and Passphrases: SSH key passphrases, GPG passphrases, and system encryption/authorization tokens.

Yes, keyrings automatically save all this data, but there’s more to these handy apps than meets the eye! 🚀

Built-in Convenience

First and foremost, keyring apps are built into the system. For example, KDE Wallet comes preinstalled with the KDE Plasma desktop. Seahorse (the GUI frontend for the GNOME keyring) isn’t installed by default; however, you can add Seahorse via the standard repositories. Keyrings store some crucial information for you, such as SSH keys, usernames/passwords for applications, wireless network passwords, and GPG passphrases, all of which are important for the proper functioning of the OS. A keyring app serves as an encrypted vault for sensitive credentials, secrets, keys, and passphrases. 🔒

User Isolation

When your keyring app stores something like wireless network information, it does so on a per-user basis and sandboxes that information from other users. Every piece of information stored in a keyring is isolated from other users. In fact, that information is stored in protected kernel or isolated user-space memory, so there’s no way another user can access it. Keys are also treated like files and are controlled by Access Control Lists (ACL) for even tighter security. Additionally, when a key is unlinked to an application or component, the kernel automatically destroys it securely. This also happens when a parent process ends; even if the key is no longer used or linked, the secret isn’t stored in memory and cannot be accessed when not in use. 🔐

Password Management

Keyrings can also be used as a password manager. If you don’t employ a third-party password manager, then you should definitely manually add those passwords to the keyring app. However, there is an important security consideration with KDE Wallet. With GNOME Passwords and Keys, when you lock a keyring, you then have to unlock it (using its password) to view any files. KWalletManager used to work the same way. To fix this issue and prevent the wallet from automatically opening if your login password matches, use Blowfish encryption (and not GPG). Make sure the wallet password doesn’t match your user login password. Finally, type a strong, unique password when prompted. 🔑

To read the complete article see: Read full article