invoker-community icon indicating copy to clipboard operation
invoker-community copied to clipboard

Master password or keychain usage for persisted passwords and passphrases in config.json

Open koernchen02 opened this issue 4 years ago • 0 comments

It would be "nice" to have some way to encrypt all the passphrases and passwords in the apps config.json. Currently I'm only connecting the app with demo applications and dedicated "toy" ssh keys, but for real-life usage I have to say I'm not so pleased with this. I know, I know, if someone already has access to my home's .config/files everything is screwed up anyway, but at least nobody gets access to my passphrases in plaintext.

I'm also struggeling with this topic in my own electron-apps, and I know this is not an easy thing to get right. Especially when trying to be multi-platform ready. I experimented with atom/node-keytar but the issues around this package made it clear, that at least other node processes are able to access each other.

I'm happy to share my current workflow if you are interested, even if it is far from what I would consider to be satisfactory.

koernchen02 avatar Feb 03 '21 19:02 koernchen02