Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just installed Pidgin and read about how the passwords are stored in plain text. How do I go about securing stuff up so that my conversations are secure?

I read that giving a 400 permission to the accounts.xml is sufficient, but is it really all that it takes to secure Pidgin?

What else could be done?

share|improve this question
up vote 2 down vote accepted


Pidgin needs to know the passwords to those accounts if you want it to sign you on each time you start the program.

Current versions of firefox and chrome can encrypt your password list behind a master password, but pidgin does not currently have that facility -- and given that it's open source, and I don't think most of its users are amenable to entering even a single master password every time they start the program, it's not likely to get it in the near future.

Setting accounts.xml to 400 is currently the best you can do short of telling pidgin not to remember any passwords, period.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.