Sample Header Ad - 728x90

Remove "save in password manager" option in gpg pinentry

2 votes
1 answer
1299 views
I have some libreoffice documents stored with "encrypt with gpg key" option. Today I was quite surprised when the document opened without requesting a passphrase. Eventually I found an entry for my gpg key in the system key and password manager, Seahorse, where the passphrase could be displayed. I conclude that I must have accidentally checked the "save in password manager" box in the pinentry dialog when I logged in the last time. A small mistake exposed a confidential document and my most important password. This appears to be the same problem as here: but in my case free access to the document and the Seahorse entry survive beyond the timeout defined in gpg-agent.conf, after echo RELOADAGENT | gpg-connect-agent and even after a reboot. I tried gnupg.conf no-allow-external-cache option, which causes a different pinentry dialog without the checkbox, but then the private key password is not accepted. Is there a way to remove or disable that checkbox in the pinentry dialog? My system: MX-linux 18.3_x64 December 15 2017 base: Debian GNU/Linux 9 (stretch) gpg (GnuPG) 2.1.18
Asked by guest (21 rep)
Jul 25, 2020, 08:50 PM
Last activity: Jul 11, 2022, 09:27 PM