KDE

5259 readers

134 users here now

KDE is an international technology team creating user-friendly free and open source software for desktop and portable computing. KDE’s software runs on GNU/Linux, BSD and other operating systems, including Windows.

Plasma 6 Bugs

If you encounter a bug, proceed to https://bugs.kde.org, check whether it has been reported.

If it hasn't, report it yourself.

PLEASE THINK CAREFULLY BEFORE POSTING HERE.

Developers do not look for reports on social media, so they will not see it and all it does is clutter up the feed.

founded 1 year ago

MODERATORS

[email protected]

Outdated: Automatically unlock KeepassXC vault using KWallet on KDE (feddit.de)

submitted 9 months ago* (last edited 6 months ago) by [email protected] to c/[email protected]

4 comments fedilink hide all child comments

EDIT:

This is just secure if your threat model is "having synced passwords, maybe on unencrypted cloud storage".

Kwallet is not secure, it can easily be read by any program. I stopped using this method myself as it is unnecessarily insecure.

original post

Open "KWalletManager"
If not existent, create a new folder called "Passwords" by clicking on the clear area and then "New"
Open that folder, in here you find multiple folders, one is called "Passwords" in your systems language
Right click the "Passwords" subfolder and press "new"
Name the entry for example "Keepass", click on the entry and "show content", enter your Keepass Password
Create an Appstarter for quick-opening your password storage!

You can create an App Desktop Entry like this, open your Terminal and enter:

When using KeepassXC Flatpak:

cat > ~/.local/share/applications/keepassxc-unlock.desktop <<EOF
[Desktop Entry]
Name=Keepass-unlock
Comment=Unlock your KeepassXC vault
Exec=kwallet-query -r KeepassXC kdewallet | /usr/bin/flatpak run --branch=stable --arch=x86_64 --command=keepassxc --file-forwarding org.keepassxc.KeePassXC --pw-stdin ~/passwords.kdbx
Icon=emblem-encrypted-unlocked
Type=Application
EOF

When using a native package:

cat > ~/.local/share/applications/keepassxc-unlock.desktop <<EOF
[Desktop Entry]
Name=Keepass-unlock
Comment=Unlock your KeepassXC vault
Exec=kwallet-query -r KeepassXC kdewallet | keepassxc --pw-stdin ~/passwords.kdbx
Icon=emblem-encrypted-unlocked
Type=Application
EOF

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 9 months ago (1 children)

That's how you create a flaw in your password manager and makes it pointless

[–] [email protected] 3 points 9 months ago (2 children)

In that case Kwallet needs to be fixed. If kwallet is safe, this is safe.

But you can decide how a tool can be safe that allows to extract passwords just like that.

[–] [email protected] 6 points 9 months ago

But you just made the use of password manager pointless.

The point of a password manager is to use as a vault that opens only when you type your password, retrieve what you need and then lock it again.

Keeping it open always is unsecure, cause once your system or kwallet is exploited, your password will be exposed immediatly.

Anyway, if you wanna use Kwallet as your vault, it's much safer using KeepassXC native function Secret Agent.

[–] [email protected] 2 points 6 months ago

Well, finding and reading this file definitely takes some effort, but an attacker can get your passwords that way as long as kwallet is unlocked.

They just need to run kwallet-query -r KeepassXC kdewallet to get the password and then download ~/passwords.kdbx