I use a computer where I'm not the admin, so my password could be changed at any time. My question is, does changing the login password to my account also change the password to the keyring? I don't want the admin looking at my Chrome passwords.
1 Answer
Known facts about the process:
The procedure to change the account password includes a hook to update the keyring password in the process.
The keyring password can only be changed (successfully), when the previous password is supplied to the process that changes it, since the key securing the keyring needs to be decrypted with the old and re-encrypted with the new password.
Assumption about the "attacker":
- A system administrator running
sudo passwd degru
(or doing something equivalent) doesn't (typically) know the previous account password for userdegru
.
Conclusion: The keyring password is only updated during an account password change, when the account owner changes the password. The system administrator cannot decrypt the keyring simply by changing the account password.
-
Ah, thank you. Does this change if the password is changed through the Ubuntu user settings GUI?– DegruCommented Jan 1, 2016 at 2:24
-
No. The process is fundamentally the same and changing the keyring password still requires knowledge of its current password, no matter how it is changed. Commented Jan 1, 2016 at 13:11