[dissolved] Exporting chromium passwords to pass securely

cfr · 2022-11-07 05:47:33

I am trying to switch to pass for password management. Until now, I've been using firefox and chromium (and equivalents on Android) and bits and pieces. However, I'm particularly unhappy having them in chromium.

I used firefox-decrypt (from AUR) to transfer passwords from firefox directly into pass. This seems to have worked well. However, I can't find anything similar for chromium. I know I can export them to a file, but this will then be in clear text. I still think that's better than keeping them in chromium, since it will only be temporary, but it isn't ideal and I don't know whether the format will lend itself to importation into pass.

I thought I could save the file to /tmp, but I don't know if that is better or worse than writing it to disk, especially with swap.

Or I could create some kind of encrypted container.

But is there a more straightforward way to accomplish this securely?

Last edited by cfr (2022-11-07 21:06:38)

jasonwryan · 2022-11-07 06:34:50

I don't see any way to do this programmatically (but I didn't look too hard). You could try piping Chromium's output through an encryption step, but you'll still have to decrypt it to create the files in pass...

Or, mount a USB drive, export the passwords to that, add them to pass, and then dd the drive before hitting it repeatedly with a sledgehammer.

seth · 2022-11-07 07:56:27

Does chromium ask you for a master password when it starts?

cfr · 2022-11-07 18:08:14

seth wrote:

Does chromium ask you for a master password when it starts?

No. That's another reason I'm less than happy keeping passwords in it.

seth · 2022-11-07 20:09:03

But you're concerned about writing them into a temporary file?
Think about that…

cfr · 2022-11-07 20:53:10

seth wrote:

But you're concerned about writing them into a temporary file?
Think about that…

Well, I'm *more* concerned about leaving them in chromium.

seth · 2022-11-07 20:57:21

The point is that the passwords are currently de-facto stored clear-text on your disk. No matter how chromium might obfuscate that, there's no external information required to access their clear text.
I'd really not waste too many worries about having them in a tmpfs file for a while because of that.

cfr · 2022-11-07 21:06:12

seth wrote:

The point is that the passwords are currently de-facto stored clear-text on your disk. No matter how chromium might obfuscate that, there's no external information required to access their clear text.
I'd really not waste too many worries about having them in a tmpfs file for a while because of that.

Oh, I see. OK, thanks. I was inclined to think it was much better to do it that way than leave them, but I wasn't sure chromium wasn't doing something to protect them which would make exporting them that way stupid. Mostly because when I went to export them, chromium brought up a big warning about the exported file being clear text, which suggested they weren't clear text at the moment.

Arch Linux

#1 2022-11-07 05:47:33

[dissolved] Exporting chromium passwords to pass securely

#2 2022-11-07 06:34:50

Re: [dissolved] Exporting chromium passwords to pass securely

#3 2022-11-07 07:56:27

Re: [dissolved] Exporting chromium passwords to pass securely

#4 2022-11-07 18:08:14

Re: [dissolved] Exporting chromium passwords to pass securely

#5 2022-11-07 20:09:03

Re: [dissolved] Exporting chromium passwords to pass securely

#6 2022-11-07 20:53:10

Re: [dissolved] Exporting chromium passwords to pass securely

#7 2022-11-07 20:57:21

Re: [dissolved] Exporting chromium passwords to pass securely

#8 2022-11-07 21:06:12

Re: [dissolved] Exporting chromium passwords to pass securely

Board footer