5 ms·
> KeePass on an airgapped box Sounds inconvenient for password retrieval when not home, how does this work in practice? How about an airgapped phone with Grap
by tester457 4y ago
> KeePass on an airgapped box
Sounds inconvenient for password retrieval when not home, how does this work in practice?
How about an airgapped phone with GrapheneOS and Keepass?
- anonym29 4y agoSounds like you just solved the inconvenience problem.
- tester457 4y agoHow is your setup though? Can you describe it in more detail please? Interested in the perspective of a security professional.
- anonym29 4y agoFor personal use, I use KeePass on my "offline box", which is an airgapped machine running Qubes with full disk encryption. KeePass is in it's own Qube, along with a few other offline things in their own qubes (hash cracking, archival storage for old media/files/projects, offline copy of wikipedia, offline maps/nav, tons of old training content for certs, so on and so forth). Is it inconvenient at times? Yes. But I spend so much time at my desk, that those times aren't super common. On mobile, my personal daily driver is running GrapheneOS, but I do not keep my passwords on it. I am unaffiliated with them, and this isn't an endorsement, but I just recently ordered a Mooltipass, which I intend to thoroughly audit. If it's security proves satisfactory to me, I may use one going forward in a limited capacity.