Good morning.
running Chromium and using its password manager? It uses an unencrypted sqlite database for your secrets
```
$ file ".config/chromium/Profile 1/Login Data For Account"
.config/chromium/Profile 3/Login Data For Account: SQLite 3.x database, ...
sqlite3 ".config/chromium/Profile 1/Login Data For Account"
sqlite> .tables
insecure_credentials password_notes sync_model_metadata
logins stats
meta sync_entities_metadata
sqlite> SELECT * from logins;
...
```
if you're on Linux, Chromium integrates well with system keyrings like KDE wallet. that means it'll encrypt your secrets and unlock them when you log in. This can be especially nice if you restart a system frequently. I restart one of my systems once or twice daily, and unlocking Bitwarden is getting a bit tedious.
```
chromium --password-store=kwallet
chromium --password-store=gnome
```
if you use nix, you can set a policy to have Chromium use the system keyring (kwallet). Here's my NixOS policies for Chromium:
```
programs.chromium = {
enable = true;
extraOpts = {
# 
"SpellcheckEnabled" = false;
"DefaultSearchProviderEnabled" = true;
"DefaultSearchProviderName" = "Kagi";
"DefaultSearchProviderSearchURL" = "https://kagi.com/search?q={searchTerms}";
"SearchSuggestEnabled" = false;
"DefaultSearchProviderSuggestURL" = "";
# 1=Allow, 2=Block, 3=Ask
"DefaultGeolocationSetting" = 2;
"DefaultClipboardSetting" = 2;
#"DefaultNotificationsSetting" = 2;
# "PasswordManagerEnabled" = true;
"PasswordStore" = "kwallet6";
};
};
```
Is there a setting that you always toggle when you create a profile? you can declare it here has a policy, forever.
if you use nix home-manager, you can configure extensions that'll always be present in all your profiles
```
chromium = {
enable = true;
extensions = [
{ id = "nngceckbapebfimnlniiiahkandclblb"; } # Bitwarden
];
};
```
the home-manager module even supports doing that for other derivatives of chromium
```
chromium.package = pkgs.brave;
```
Bitwarden's UI got re-hauled last year and I haven't liked it as much ever since. Using it on my desktop which has long-lived boot sessions makes sense. Using it on my VR machine/workstation makes less sense these days.
Chrome Enterprise
Chrome Enterprise Policy List & Management | Documentation
Chrome Enterprise policies for businesses and organizations to manage Chrome Browser and ChromeOS.