2022 Developer Survey is open! Take survey.

Questions tagged [pinentry]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

How to call pinentry from bash script

How to call pinentry from bash script so I am prompted for single input on the same terminal from which my script was invoked from and then pipe the entry to some other command via stdout for the sake ...
user avatar
  • 101
0 votes
0 answers
16 views

Password not remembered in 'pinentry-mode loopback' (GPG)

I have an encrypted secret file - secret.gpg. For better security I created a separate user user2 in whose home folder this file is stored. The idea is that from under user1 (via sudo) to access only ...
user avatar
  • 1
1 vote
0 answers
107 views

GPG using sudo under another user, is `pinentry-mode loopback` safe?

There are 2 users: user1 and user2. When trying to use gpg via sudo (symmetric decryption): user1@host: sudo -u user2 gpg /home/user2/pass.gpg an error gpg: decryption failed: No secret key. I set it ...
user avatar
  • 127
2 votes
1 answer
2k views

GPG can't decrypt: no pinentry program

I can't decrypt my passwords with pass neither with gpg directly. gpg: encrypted with rsa4096 key, ID id, created creation_date "name <email>" gpg: public key decryption ...
user avatar
0 votes
0 answers
13 views

GPG - use cached key before prompting for other cards when multiple receivers?

When using gpg 2.2.28 & gpg-agent to decrypt a ciphertext that has been encrypted for (any one of) multiple 'receivers', the default behaviour is that it tries to find and use private keys in some ...
user avatar
  • 1,588
2 votes
1 answer
583 views

Strange error with GnuPG: claims "no secret key" when terminal is too small

This is the content of my .gnupg/gpg-agent.conf: pinentry-program /usr/bin/pinentry-curses When I try to retrieve a password from pass' store, e.g. via pass -c path/to/password in a very small-sized ...
user avatar
  • 1,012
1 vote
0 answers
183 views

GPG pinentry not receiving key presses during passphrase entry when forwarding gpg-agent

When forwarding my gpg-agent to a remote server I am able to see the my private key listed. Even though I unlocked my key locally I still need to unlock it on the remote machine. However when I try to ...
user avatar
  • 11
0 votes
1 answer
458 views

Why would GPG Pinentry be slow when opening in GUI but instantaneous when opening in CLI?

Having a hard time figuring out the debugging steps for this behavior. I'll run some gpg command and, typically, about 20 seconds later a GUI Pinentry window will pop up where I type in my password ...
user avatar
  • 161
1 vote
1 answer
576 views

gpg/pinentry - Can't enter passphrase outside terminal

I am trying to decrypt a gpg file inside a script. When I run gpg -d file.gpg in the terminal, I get prompted to enter the password in a curses dialog box. But when I run a script containing that line,...
user avatar
1 vote
1 answer
519 views

Remove "save in password manager" option in gpg pinentry

I have some libreoffice documents stored with "encrypt with gpg key" option. Today I was quite surprised when the document opened without requesting a passphrase. Eventually I found an ...
user avatar
  • 11
1 vote
0 answers
62 views

GPG pinentry, how to show requestor

So I have pinentry popping up whenever I fresh boot my desktop environment (i3), asking for my main GPG main key password. I perhaps configured at some point some program to read some pass entry, but ...
user avatar
  • 223
2 votes
1 answer
675 views

Can I configure pass to always use pinentry-curses?

I use pinentry-qt most of the time, but in the specific case that I'm using pass, I would like to use pinentry-curses because of the faster startup time. Is there a way that I can configure pass to ...
user avatar
  • 803
2 votes
0 answers
177 views

Arch/ XFCE - Disable global keyboard grabbing for gcr/ gnome-keyring

I am using gnome-keyring as ssh-agent on my arch/ xfce system. Since I have multiple ssh-keys, I additionally have a password manager to store their keys. Adding those ssh-keys to the keyring works ...
user avatar
  • 191
1 vote
1 answer
360 views

how to navigate with pinentry

I was was using gpg --gen-key till I got to enter the passphrase where I get: ┌──────────────────────────────────────────────────────┐ │ Please enter Passphrase, │ │ ...
user avatar
  • 200
2 votes
1 answer
1k views

pinentry not showing in tmux

I'm having some trouble getting gpg (actually pass which uses gpg in the background) to work inside of tmux and a Yubikey Neo. When attempting to decrypt a file or sign something using gpg I get the ...
user avatar
  • 125
3 votes
0 answers
890 views

Can't sign/encrypt unless I start gpg-agent manually

I recently set up Ubuntu in a VM for development work, but found that git couldn't sign my commits. Investigating further, I found that gpg-agent wasn't able to request my passphrase via pinentry-...
user avatar
  • 141
3 votes
0 answers
696 views

How can I suppress the pinentry dialogue box if there is no gpg password?

I'm using (neo)mutt with GPG. I've set my gpg password to empty, but when I attempt to decrypt an incoming email, mutt still presents a pinentry dialogue box. If I just press Enter (with no string), ...
user avatar
  • 18.1k
4 votes
1 answer
6k views

How to make the default-cache-ttl option of gpg-agent work?

I use pass as a password manager. I would like my passphrase to be cached during a certain amount of time to avoid retyping my passphrase every time that I want to clip one of my passwords. Pass is ...
user avatar
1 vote
2 answers
2k views

gpg2 pinentry fails without X

What is working My gpg-agent pinentry works fine under X. I can run echo "test" | gpg2 -ase --default-recipient-self | gpg2 to cache my passwords and later run killall gpg-agent -1 to flush them. ...
user avatar
  • 1,228
5 votes
0 answers
875 views

Intermingled input when using local gpg-agent from remote site

I'm starting a local gpg-agent on my Mac, with the extra-socket option. Then I connect to a remote site using SSH, forwarding the remote S.gpg-agent socket to the local S.gpg-agent.extra socket. This ...
user avatar
  • 268k
0 votes
1 answer
563 views

Configure Duplicity to use pinentry?

Duplicity by default asks for passwords to GnuPG keys on start up and caches them in memory throughout process lifetime. Is there a way to have it use /usr/bin/pinentry instead so I know I'm not ...
user avatar
  • 35.5k
1 vote
1 answer
2k views

Problem configuring GPG pinentry

I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
user avatar
  • 905
15 votes
2 answers
13k views

How to get pinentry-curses to start on the correct tty?

I use gpg-agent for managing both PGP e SSH identities. The agent is started with a script like this gpg_agent_env="$XDG_CACHE_HOME/gpg-agent.env" export GPG_TTY="$(tty)" if ! ps ...
user avatar
  • 293
3 votes
1 answer
279 views

Non-GUI based pin-entry for gpg

I'm in the process of remotely viewing and selecting hundreds of images, some of which are encrypted with a symmetric key. I log in to the remote desktop machine using ssh. The viewing is not fast, ...
user avatar
  • 35
4 votes
1 answer
2k views

About pinentry usage along with gpg

Is mandatory to use pinentry with gpg2? Why is pinentry better over legacy prompt?
user avatar
  • 3,939
4 votes
0 answers
364 views

Enigmail Thunderbird pinentry requests all passwords to all secret keys

I want to read a GPG encrypted email using Thunderbird Enigmail from Account.1@mail.com and Edit > Account Settings > Account.1 > OpenPGP Security has "Use specific OpenPGP key ID" selected. However, ...
user avatar
  • 176
12 votes
2 answers
15k views

Pinentry fails with gpg-agent and SSH

I'm running Fedora 22. I'm trying to setup GnuPG to have my SSH connections authenticated using my PGP authentication subkey that is located on my Yubikey Neo. I have a systemd unit starting the gpg-...
user avatar
  • 1,887
2 votes
0 answers
2k views

Decrypting with GPG after a "su - different user"

I have cron job running a script in the cron of "USER A" that encrypts many files in a loop using the gpg command below: gpg --batch --cipher-algo AES256 --passphrase "PASSWORDISHERE" -c FILENAME "...
user avatar
  • 21
1 vote
0 answers
872 views

How can I have pinentry ask if a password should be remembered?

In this answer, the password prompt for gpg-agent includes options for how long the password should be remembered. However, in my system I get a much simpler prompt, without that option How can I ...
user avatar
  • 5,041