andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 1 | # Linux Password Storage |
andybons | 3322f76 | 2015-08-24 21:37:09 | [diff] [blame] | 2 | |
Tom Anderson | 761687a | 2023-06-14 17:27:39 | [diff] [blame^] | 3 | On Linux, Chromium can store passwords in four ways: |
andybons | 3322f76 | 2015-08-24 21:37:09 | [diff] [blame] | 4 | |
Tom Anderson | 761687a | 2023-06-14 17:27:39 | [diff] [blame^] | 5 | * GNOME Libsecret |
andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 6 | * KWallet 4 |
Tom Anderson | 761687a | 2023-06-14 17:27:39 | [diff] [blame^] | 7 | * KWallet 5 |
andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 8 | * plain text |
andybons | 3322f76 | 2015-08-24 21:37:09 | [diff] [blame] | 9 | |
andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 10 | Chromium chooses which store to use automatically, based on your desktop |
| 11 | environment. |
andybons | 3322f76 | 2015-08-24 21:37:09 | [diff] [blame] | 12 | |
Tom Anderson | 761687a | 2023-06-14 17:27:39 | [diff] [blame^] | 13 | Passwords stored in KWallet are encrypted on disk, and access |
andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 14 | to them is controlled by dedicated daemon software. Passwords stored in plain |
Tom Anderson | 761687a | 2023-06-14 17:27:39 | [diff] [blame^] | 15 | text are not encrypted. Because of this, when KWallet is |
andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 16 | in use, any unencrypted passwords that have been stored previously are |
| 17 | automatically moved into the encrypted store. |
andybons | 3322f76 | 2015-08-24 21:37:09 | [diff] [blame] | 18 | |
Tom Anderson | 761687a | 2023-06-14 17:27:39 | [diff] [blame^] | 19 | Support for using KWallet was added in version 6, but using |
andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 20 | these (when available) was not made the default mode until version 12. |
andybons | 3322f76 | 2015-08-24 21:37:09 | [diff] [blame] | 21 | |
andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 22 | ## Details |
andybons | 3322f76 | 2015-08-24 21:37:09 | [diff] [blame] | 23 | |
andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 24 | Although Chromium chooses which store to use automatically, the store to use can |
| 25 | also be specified with a command line argument: |
| 26 | |
Tom Anderson | 761687a | 2023-06-14 17:27:39 | [diff] [blame^] | 27 | * `--password-store=gnome-libsecret` (to use GNOME Libsecret) |
| 28 | * `--password-store=kwallet` (to use KWallet 4) |
| 29 | * `--password-store=kwallet5` (to use KWallet 5) |
andybons | ad92aa3 | 2015-08-31 02:27:44 | [diff] [blame] | 30 | * `--password-store=basic` (to use the plain text store) |
| 31 | |
| 32 | Note that Chromium will fall back to `basic` if a requested or autodetected |
| 33 | store is not available. |
| 34 | |
| 35 | In versions 6-11, the store to use was not detected automatically, but detection |
| 36 | could be requested with an additional argument: |
| 37 | |
| 38 | * `--password-store=detect` |