4 ms·
Although KeePassXC offers better process memory protection, it also can not help if you hibernate and the memory is written to disk. Hardware password managers
by psychphysic 3y ago
Although KeePassXC offers better process memory protection, it also can not help if you hibernate and the memory is written to disk.
Hardware password managers exist and are not so inconvenient.
- mook 3y agoIsn't it usually set to re-lock on screen lock (which typically happens before hibernate)?
- Schnitz 3y agoIsn’t that a mostly moot point if you also use full disk encryption like File Vault?
- fbdab103 3y agoNot that it is a panacea, but you can/should configure Keepass to autolock the database after inactivity. I believe the default is something like 4 minutes, which should kick in before any kind of hibernation or paging would occur.
- paulryanrogers 3y agoThen you have to type the whole password again or your auto-type and plugins don't work. If you keep it open all day for random login needs then this can be a hassle. Full disclosure, I sell a paid KP2 plugin to soft lock the UI. (It won't protect memory or dumps but does prevent naive snooping.)