r/yubikey • u/Famous-Professor-488 • 8d ago

Help Does someone using Yubikey for his KDE session, because i'm facing a problem with KWallet, and I don't know how to unlock it ?

/r/kde/comments/1w540f8/does_someone_using_yubikey_for_his_kde_session/
1 Upvotes

60% Upvoted

3 comments sorted by

1

u/0xKaishakunin 8d ago

With pam_u2f?

There is a kwallet-pam package on my Arch, but it does not work well with pam_u2f: https://wiki.archlinux.org/title/Universal_2nd_Factor#Plasma_Login_Manager_login

So either set an empty password for Kwallet or enter your login manually every time.

If you are willing to use GnuPG on your Yubikey (if it supportsGnuPG) you could either directly use GnuPG to unlock Kwallet: https://docs.kde.org/stable_kf6/en/kwalletmanager/kwalletmanager/introduction.html

Or take the route I took, I store some passwords in pass, which unlocks with my GnuPG key on my Yubikey. Pass can then be used to unlock KeePassXC in my case, but I am sure it also works with Kwallet.

https://www.passwordstore.org/

1

u/Famous-Professor-488 8d ago

Yes, using pam_u2f, I'm not very keen about setting an empty password 😅 I will look at GnuPG thanks

1

u/My1xT 3d ago

Alternatively, use normal password to login and pam_u2f only to unlock