Bug 484098

Summary:	Keysmith does not encrypt your data
Product:	[Applications] Keysmith	Reporter:	Igor <igorpadua>
Component:	General	Assignee:	Bhushan Shah <bshah>
Status:	REPORTED ---
Severity:	normal	CC:	groszdanielpub, igorpadua, justin, nicolas.fella, zdenek.koprivik
Priority:	NOR
Version First Reported In:	24.02.0
Target Milestone:	---
Platform:	openSUSE
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Igor 2024-03-20 19:25:33 UTC

If a malicious person gains access to a person's computer. It will have full access to Keysmith data in "~/.config/org.kde.keysmith". This is because the data is not encrypted.

Comment 1 Justin Zobel 2024-12-18 03:58:01 UTC

The data is hashed against the password you created when you setup Keysmith I believe.