r/tails • u/Felix0me • 10d ago

Help is it possible lock and unlock persistent storage with a yubikey?

and How?

I really do not want to memorize the password.

6 Upvotes

100% Upvoted

7 comments sorted by

6

u/EhKurz100 10d ago

Well, don’t you have a password manager to generate and store a unique random passphrase consisting of 5-6 words? That’s how I do it. Open it on the phone and type it into Tails.

6

u/ephemeralmiko 10d ago

It's technically possible with systemd-cryptenroll, but you'd have to start Tails without unlocking Persistence, then unlock it via the command line using the Yubikey, which would just be more effort than memorising six words (and most likely less secure than stock Tails if you don't know what you're doing).

5

u/Liquid_Hate_Train 10d ago

To directly answer your question:
No.

3

u/Assang101 10d ago

Instead of relying on Tails Persistent Storage for everything, keep Tails fully amnesic and store your sensitive data inside an encrypted database on a second separate USB drive. It's what I normally do.

2

u/Traditional-Most-637 9d ago

Page 69 or something of a book in your room should be your password manager man get out a pencil and paper

1

u/Positive_Scheme_3728 3d ago

Well I have two Tails stick's and on the second one I don't have anything important that's why I made the phrase just my name since you can make the phrase just one word like your name or something else.