https://blog.xijiang.org/tags/password/ Recent content in Password on Breeding and genetics Hugo en-us Fri, 25 Sep 2026 13:43:12 +0200 https://blog.xijiang.org/posts/password-vault-manual/ Fri, 25 Sep 2026 13:43:12 +0200 https://blog.xijiang.org/posts/password-vault-manual/ <h1 id="local-firefox-password-backup--gpg-vault-manual">Local Firefox Password Backup &amp; GPG Vault Manual</h1> <p><img src="firefox-vault-blog-figure.jpg" alt="Firefox Password Backup &amp; GPG Vault"></p> <p>This guide documents how to manage a local, passphrase-protected password vault on Linux using asymmetric GPG encryption and the <a href="https://xijiang.org/script/manage-passwords.py"><code>manage-passwords.py</code></a> utility.</p> <hr> <h2 id="1-security-architecture">1. Security Architecture</h2> <ul> <li><strong>Private Key Passphrase Protection</strong>: Passwords are encrypted against your GPG public key. Decryption requires access to your GPG private key unlocked with your secret passphrase.</li> <li><strong>In-Memory Operations</strong>: Decryption and re-encryption happen strictly in memory through subprocess pipes. Unencrypted password data is never saved to temporary disk files.</li> <li><strong>Atomic File Writes</strong>: Re-encrypted updates are written to an atomic temporary file before replacing the target vault to prevent data corruption.</li> <li><strong>Default Storage Location</strong>: <code>~/.local/share/password-vault/vault.json.gpg</code></li> </ul> <hr> <h2 id="2-prerequisites-gpg-keypair">2. Prerequisites: GPG Keypair</h2> <p>If you do not already have a GPG key:</p>