17

Can someone please explain what Ubuntu's keychain or keyring is, as well as use cases for it?

  • 1
    The question should be more clear, there is no such thing as the "ubuntu keychain" . – João Pinto Aug 8 '10 at 22:24
  • 2
    That's not true Jo', it's just called Gnome Keyring – D3L Aug 13 '14 at 6:01
17

The Gnome Keyring is used by Gnome-ish apps to store secrets on your behalf. The secrets are stuff like SSH keys, keys to wifi networks, et cetera.

If you want to poke at your keyring, go to the Accessories menu and run the app called "Passwords and Encryption Keys." It will show your a number of folders on the Password tab - each one of those is called a keyring. Each entry under a folder is a password. Double click on them to see their contents.

The reason a keyring is provided is that applications have to store secrets somewhere. It's easy for programmers to make a mistake and leave secrets around for anyone to read. In theory, the Gnome Keyring should store passwords for everything and do it right.

(You should always exercise a minimum of security - add a password to keyrings that you care about, keep your computer physically safe, etc)

  • To clarify on the “doing it right” part, the particular feature it does is one-way encryption, so your passwords under the keyring are all encrypted and the only way to decrypt them is to enter a password. That would be a real pain if you had to do it for every application, but it's really the only way to be sure. Normally the step of unencrypting your keyring happens invisibly in Ubuntu, because the password you enter to log in is the same as your keyring password. – Dylan McCall Sep 16 '11 at 5:31
  • If you're concerned about any of this, the app Erigami mentions lets you tighten this a little more. You can temporarily lock a keyring or change its password so you always have to unlock it separately at login, for example. You can find those options if you right click a keyring in the Passwords list. – Dylan McCall Sep 16 '11 at 5:41
  • Is seahorse the default command line command to open the GUI you described? – dcorking Dec 20 '17 at 6:48
11

Which keychain do you mean?

  • There's the apt keyring, that is used for verifying downloaded packages. This helps to prevent malicious software from being installed via apt.
  • There's your user keyring where good apps store passwords (such as mail passwords, wifi passwords)

And then there's this. Guess what that is good for :)

  • I'm glad you brought that distinction on the table; the apt keyring was actually what I was looking for when getting in here. +1 – Anto Aug 13 '14 at 15:06
  • "And then there's this" product appears to no longer exist in the store. – l --marc l Apr 30 at 0:42
4

A keyring basically stores all your various passwords and allows you to access them with one master password. So instead of having to enter passwords for my wireless, email and ubuntu one accounts separately I just enter one master password to unlock my keyring. Then I have access to all the accounts stored in that keyring.

If you set your keyring password to the same as your login password the keyring will be unlocked when you sign in at boot up.

1

If you mean the package/command named keychain:

keychain is a manager for ssh-agent, typically run from ~/.bash_profile. It allows your shells and cron jobs to easily share a single ssh-agent process. By default, the ssh-agent started by keychain is long-running and will continue to run, even after you have logged out from the system.

So in short, it's a tool to make ssh-agent easier to use.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.