Where to save passphrases?

Bob (Robert) Cavanaugh robertc at broadcom.com
Mon Jul 28 19:04:18 CEST 2014

My two cents (FWIW):
At work I cache my passphrase for two hours only. It is a pain to re-enter the passphrase, but is required by our threat model. At home, each member of my family has their own computers and I cache my passphrase per session. However I always completely shut down my laptop, I do not hibernate or sleep.

Bob Cavanaugh


-----Original Message-----
From: Gnupg-users [mailto:gnupg-users-bounces at gnupg.org] On Behalf Of Werner Koch
Sent: Saturday, July 26, 2014 12:08 PM
To: Heinz Diehl
Cc: gnupg-users at gnupg.org
Subject: Re: Where to save passphrases?

On Sat, 26 Jul 2014 14:04, htd at fritha.org said:

> some serious sideeffects if somebody else than you e.g. could read
> your encrypted email, because all he/she has to do is to click on it
> (because the passphrase is still cached).

  gpgconf --reload gpg-agent

clears the passphrase cache.  Call that before leaving the computer.



Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

Gnupg-users mailing list
Gnupg-users at gnupg.org

More information about the Gnupg-users mailing list