GPG stores the password after encription?
Borden
borden_c at tutanota.com
Thu Sep 10 03:09:26 CEST 2026
In case the life advice was unhelpful, I'll try to finish Hansen's comment:
https://www.gnupg.org/documentation/manuals/gnupg/Agent-Options.html says the --pinentry-timeout default is indefinite, but whatever front-end handles pinentries on your system may set a different limit. You can change the limit in ~/.gnupg/gpg-agent.conf, or %appdata%\gnupg\gpg-agent.conf on Windows.
Before the timeout, I can only guess that gpg holds at least some of your decrypted keyring in RAM. How resilient that is against a RAM sniffer I can't say, but would probably depend on your OS.
I've only ever seen it store a file lock placeholders on the hard disk during en/decryption. So you probably don't have to worry about someone recovering an encrypted keyring after you shut off the computer.
I'm sure at least some of what I said is wrong as I'm working from the documentation and not the source.
More information about the Gnupg-users
mailing list