Hacker News new | past | comments | ask | show | jobs | submit login

> KeePass on an airgapped box

Sounds inconvenient for password retrieval when not home, how does this work in practice?

How about an airgapped phone with GrapheneOS and Keepass?




Sounds like you just solved the inconvenience problem.


How is your setup though? Can you describe it in more detail please? Interested in the perspective of a security professional.


For personal use, I use KeePass on my "offline box", which is an airgapped machine running Qubes with full disk encryption. KeePass is in it's own Qube, along with a few other offline things in their own qubes (hash cracking, archival storage for old media/files/projects, offline copy of wikipedia, offline maps/nav, tons of old training content for certs, so on and so forth).

Is it inconvenient at times? Yes. But I spend so much time at my desk, that those times aren't super common.

On mobile, my personal daily driver is running GrapheneOS, but I do not keep my passwords on it.

I am unaffiliated with them, and this isn't an endorsement, but I just recently ordered a Mooltipass, which I intend to thoroughly audit. If it's security proves satisfactory to me, I may use one going forward in a limited capacity.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: