2 ms·
> I used to have my boot partition encrypted with the same password as my primary user You say that as if it's not a good idea, but in the absence of external
by thegeomaster 5y ago
> I used to have my boot partition encrypted with the same password as my primary user
You say that as if it's not a good idea, but in the absence of external factors (password being used elsewhere or a hash stored somewhere e.g. for corporate SSO), using the same password shouldn't really diminish the security of your setup.
- pengaru 5y agoYou're more frequently entering the primary user password (screen unlocking, logins, sudo...) so there are substantially more opportunities to observe it either visually like over the shoulder or from camera footage, or through a compromised machine fully online. Generally the FDE is unlocked in an offline and minimally functional state, and being a one-time entry @boot kind of thing it's far more practical to secure with things like a temporarily connected crypto hardware dug out of your bag or somesuch. There's clearly some value in making them different.