you are viewing a single comment's thread
view the rest of the comments
[–] 33 points 2 years ago (1 child)

Not storing it in plaintext would require setting up some kind of password, right?

  • source
  • hideshow 1 child comment
  • [–] 15 points 2 years ago*

    Some way to encrypt the decryption key.

    This could also mean TPM + Pin. Or using a Nitrokey, externally, which stores the password to decrypt the decryption key.

    That is how user account unlocking (on GrapheneOS with Pixel phones) is done.

  • source
  • parent