I have a hard time understanding the benefits of the keyring (e.g. GNOME keyring). I get the convenience parts - I don’t have to enter password for something every time I want to use it (e.g. mounted encrypted drive) and I don’t have to create a secret for some background stuff (applications keys). But the problem is, if I understand it correctly, that every application has the same access to my keyring, so, in theory, a malicious application can just read my Signal key and they can just read all my Signal messages right? Is there a point, then, in encrypting e.g. local database (like Signal) if the key to that database is readily available anyway? Any input is welcome. thanks!

    • dieTasse@feddit.orgOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      14 hours ago

      In some threads I read that you can use Keepass indeed and it can be set to give a password prompt when app asks for access to your secrets. Might be annoying but might also help prevent secrets theft when a prompt appears at a random moment.

    • Azzu@leminal.space
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      17 hours ago

      It does. I’ve been using it as my secrettool for quite a while instead of kwallet in KDE kwin wayland.