gnome-keyring

secure password and key storage daemon

TLDR

Start keyring daemon

$ gnome-keyring-daemon --start

Start with specific components

$ gnome-keyring-daemon --start --components=secrets,ssh

Replace running daemon

$ gnome-keyring-daemon --replace

Store a secret via CLI

$ secret-tool store --label="My Secret" service myapp

Lookup secret

$ secret-tool lookup service myapp

GNOME Keyring is a daemon that stores secrets, passwords, and keys. It provides secure storage for applications and handles SSH key management.The keyring is typically started at login and unlocked with the user's password. Applications access it through libsecret or the Secret Service D-Bus API.

PARAMETERS

--start

Start daemon if not running.

--replace

Replace running daemon.

--components list

Components: secrets, pkcs11, ssh.

--daemonize

Run as daemon.

-f, --foreground

Run in foreground.

--unlock

Read a password from stdin and unlock the login keyring, or create it if it does not exist.

-l, --login

Read login password from stdin (used by PAM).

-C, --control-directory directory

Directory for creating communication sockets.

-V, --version

Print version and exit.

CONFIGURATION

~/.local/share/keyrings/

Directory containing keyring data files.

COMPONENTS

- secrets: Password/secret storage- ssh: SSH agent (replaces ssh-agent)- pkcs11: PKCS#11 smart card support

INSTALL

sudo apt install gnome-keyring

sudo dnf install gnome-keyring

sudo pacman -S gnome-keyring

sudo apk add gnome-keyring

sudo zypper install gnome-keyring

nix profile install nixpkgs#gnome-keyring

CAVEATS

Usually started by desktop session. SSH component may conflict with ssh-agent. Keyring locked when session locks. Non-GNOME desktops may need manual setup.

HISTORY

GNOME Keyring was created for the GNOME desktop to provide secure credential storage. It implements the freedesktop.org Secret Service specification for cross-desktop compatibility.