News for hackers. Stuff that matters.

A comment on 49% of workers, forced to change passwords, reuse same one with minor change. Parent comment

Re:49% of workers, forced to change passwords, reuse same on... by Wowfunhappy on Friday December 13, 2019 @03:24PM (#21785070)
> Furthermore, many corporate systems do not integrate well with password managers, such as when first logging in to your system in the morning.

...are there any desktop OS's which do integrate well with password managers, for your login password?

By definition, you can't open the password manager until you've logged into the machine. So you'd need to open the password manager on a separate device.

The one exception I can think of is if you're using the password manager built into the system, like Apple's keychain, in which case your login password is basically also your master password. Unfortunately, you then lose the ability to access your passwords on any other company's platform...

[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by sjy on Friday December 13, 2019 @06:45PM (#21786697)
I think it's possible to use your FDE key to decrypt the filesystem, autologin to the desktop, unlock GNOME Keyring or a similar keychain application, and use that as a GPG and SSH agent to further encrypt your passwords using pass [1]. Since it's just Git and PGP, there are pass implementations for most OSes. I'm not sure if that counts as "integrating well;" it certainly doesn't work out of the box. I'm using all these components individually, but still typing my password 100 times a day for now.

[1]: https://www.passwordstore.org/

[ Parent | on HN ]