Unlock database on login or with fingerprint

[johansmitsnl]

Would it be possible to unlock the database on login (I use Gnome). Or authorize with the fingerprint reader?
Or store the credentials in Gnome keyring instead of a new local db. Because the keyring is already unlocked on login.

[r4gus]

Hi, thanks for the question.

Sure, storing the database decrypted is possible (in that case I would just serialize the data as json) but that has of course some security implications.

When it comes to fingerprint readers: in theory thats possible as long as you can derive a deterministic value with enough entropy from a fingerprint. The problem is that most drivers are proprietary. There is a project called libfprint (you can look if your reader is supported here but I don't have a supported finger print reader to try it out.

Gnome keyring is of course also possible.

I'm currently working on a kdbx4 library so this has to wait.

[johansmitsnl]

I'm using a fingerprint reader that is supported by libfprint. Don't know how apps do it, but in gnome when you need to perform a user authentication it prompts with a gnome authentication window. Like this it integrates with all auth requests?