Skip to content

[Feature]: Use the Secret Service for storing the auth hash rather than a plain text config file. #357

Description

@TuxBalazs

Preflight checks

  • I have searched existing issues and this feature has not already been requested.
  • This request is for the Windscribe desktop app (not the browser extension, mobile app, or web dashboard).
  • I understand that incomplete requests may be closed without further discussion.

Problem or motivation

Currently on GNU/Linux a file called ~/.config/Windscribe/Windscribe2.conf contains a line with an auth hash that lets the app log into an account. The file is in plain text so if you don't encrypt your home partition, someone with access to your drive could steal the config file and use the app from your account.

I was able to take the config file of my Debian laptop to an Arch PC and the app logged me in.

Proposed solution

GNU/Linux has a Secret Service API that lets apps store secrets like the auth hash in an encrypted wallet. The Windscribe app should use this instead.

Alternatives considered

Not everyone uses full disk encryption or an encrypted home partition.

Which platforms should this apply to?

Linux (GUI)

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions