6

Whenever you mount an LUKS encrypted disk, Ubuntu gives you 3 options:

  • Forget immediately
  • Remember for this session
  • Remember forever

I wanted to know how to reset this choice after choosing the "Remember forever" one, and make the window appear again.

7

I was looking for a similar information and came across this question of yours. Actually I was trying to understand how was this "remembered password" stored, and if it was safely stored.

Then I stumbled into @Gilles answer to a similar question in Stack Exchange.

Based on that answer, you can go to "Show applications" -> "Passwords and keys". Your stored password should be found under "Login", and can be deleted.

screenshot

Under the default configuration in Ubuntu, passwords are stored in the GNOME keyring. This applies to all passwords stored by Nautilus, as well as most other applications including web browsers.

(Let me reiterate: default configuration, most. This can be changed and there are applications that don't support the Gnome keyring.)

You can use the Seahorse GUI program or the secret-tool command line utility to view and modify the contents of the keyring.

There is some official documentation about Gnome Keyring, including a “security philosophy” and a more concrete security architecture.

Data in memory (“Remember password until you logout”) is present in the memory of the gnome-keyring-daemon process, which allows any process running as your user to query it. Gnome-keyring avoids swapping if possible; however, if you have any encrypted storage, you should have encrypted swap, because the programs that manipulate the confidential data could themselves be swapped out.

Data on disk (“Remember forever”) is stored in the file ~/.gnome2/keyrings/login.keyring. It is encrypted with a key that's derived from a password; normally, that's your login password, and Ubuntu is set up to unlock the keyring with your login password. The key is derived from the password with a salted, slow hash but I don't know exactly what the derivation function is.

0

A few more 18.10 tips in addition to gusbrs answer:

  • if the password list is empty, try going into:

    • Menu
    • View
    • Show Any
  • LUKS passwords show as: "Encryption Passphrase for <disk name>"

  • That didn't help in my case. I couldn't see any LUKS passphrases in seahorse. However, gnome-keyring-daemon -r reset the passphrase prompt, both in Thunar and in gnome-disks, and seemingly cleared the remembered passphrase for that drive. Shrug. See Question 1059797 – Martin Spacek May 5 at 13:52
  • @MartinSpacek ok, thanks for this info. I'm not sure if all those method use the same keystore or not. Sometimes it is best not to know ;-) – Ciro Santilli 新疆改造中心996ICU六四事件 May 5 at 15:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.