Passphrase reminder excercises
Is there a way to get GPG to ask me to use the passphrase once in week or once in a month just to avoid me to forget the passphrase or where I did write it down?
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Steve on 23 Oct, 2017 06:00 PM
Hi Roberto,
welcome to the GPGTools support platform. Sorry you are having problems using GPG Suite.
Not sure if that is the best way to deal with the OpenPGP passphrase. Either you are ok with the passphrase being stored in macOS, than you don't have to remember the passphrase. Or not, and in that case you can enter the passphrase whenever it is needed.
If you are worried about forgetting it, I suggest to use a password manager to store the passphrase.
Or you can try to frequently think of the passphrase when you are doing shopping etc and after a while it will probably stick.
Best,
steve
2 Posted by Roberto on 24 Oct, 2017 08:15 AM
Hi, thanks for your input.
The point is that I may try to think about my passphrase, but I may fail to think about reminding myself the passphrase. So, if GPG would prompt me for a "exercise" reminder I would be asked for the passphrase every week (or other configurable time) and I will be less likely to forget it.
A calendar reminder is not enough because it does not check my passphrase, for that I have to use GPG.
Of course I am considering the scenario in which I do not use Apple Keyring or any other password manager, because I do not want to trust them.
Cheers,
Roberto
Support Staff 3 Posted by Steve on 24 Oct, 2017 10:33 AM
Do keep in mind that using a password manager or macOS keychain does prevent you from actually having to type your passphrase. That prevents key logger attacks. Security is hard and in most cases a trade off. So it's good to think about the attach scenarios you may be facing and which setup best fits your individual threat model and environment.
Steve closed this discussion on 26 Feb, 2018 01:36 PM.