Is --password-store=basic unsafe if I never save passwords?

I never chose to save password in browsers, but I always choose to stay signed in. But what I have noticed is, when password store is not configured correctly. In spite of name of the flag having password store, it logs out of the particular website.

I’m particularly on Arch Linux where I’m unable to configure kwallet in spite of several tries. I gave up on it because cause it was affecting my daily work. I boot into Windows and Arch multiple times a day, and if password store is not configured correctly, it would log me out on every system restart.

I’m not posting here to ask for how to configure kwallet on Arch Linux. I just found out that --password-store=basic has the behavior I want. But maybe it is not safe because it stores password in unsafe manner.

But the thing is, I never save password in browser password manager. And whether I’m logger out or not should depend on the cookies, not password store.

So, is --password-store=basic unsafe if I never save password?

not sure if your arch issue is related to that or not

read the whole post and see if it help or not

and for the --password-store arg from https://support.brave.com/hc/en-us/articles/360044860011-How-Do-I-Use-Command-Line-Flags-in-Brave

it say

Specifies which encryption storage backend to use. Possible values are kwallet, kwallet5, gnome, gnome-keyring, gnome-libsecret, basic. Any other value will lead to Chrome detecting the best backend automatically. TODO(crbug.com/571003): Once PasswordStore no longer uses the Keyring or KWallet for storing passwords, rename this flag to stop referencing passwords. Do not rename it sooner, though; developers and testers might rely on it keeping large amounts of testing passwords out of their Keyrings or KWallets.

not sure if basic will be the default encypt or unencrypted

so see if the seahorse help or not and have a nice day :slight_smile:

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.