3 ms·
This sounds like a neat arrangement. How do you go about this when you’re on the go? - do you have an app on your phone which support unlocking your password-st
by kdtsh 5y ago
This sounds like a neat arrangement. How do you go about this when you’re on the go? - do you have an app on your phone which support unlocking your password-store using a smart card, or do you just not manage passwords/MFA except on your computer?
- smoyer 5y agoEach of my phones has its own private key and can decrypt the stored passwords. Having a private key protected only by a six number passcode is obviously a weak point in my security. Since password-store is encrypting each password with seven or eight public keys, it's relatively easy to revoke a compromised key and to re-encrypt all passwords/TOTP keys (excluding the compromised key). I mostly generate passwords and add entries to my password manager from a computer but I've got all the required public keys on each device so it's theoretically possible to manipulate the password-store from a phone or tablet as well.