KDE Wallet Manager is a tool to manage some passwords on your KDE Plasma system (other passwords may be managed e.g. by seahorse used by e.g. gksu). By using the KWallet subsystem it not only allows you to keep your own secrets but also to access and manage the passwords of every application that integrates with KWallet.
Unlock KDE Wallet automatically on login
If your KWallet password is the same as your username password, you can unlock your wallet automatically on login.
Install package. Then edit your login manager pam file and add the lines under their corresponding sections:
auth optional pam_kwallet5.so session optional pam_kwallet5.so auto_start
For LightDM, for example, edit
#%PAM-1.0 auth include system-login auth optional pam_kwallet5.so account include system-login password include system-login session include system-login session optional pam_kwallet5.so auto_start
For GDM, edit
For SDDM, the right lines should already be present in
After restarting your wallet should unlock automatically if your user password is the same as your KWallet password.
Using the KDE Wallet to store ssh key passhprases
First, make sure that you have an SSH agent running.
Install the package.
#!/bin/sh ssh-add </dev/null
~/.ssh/id_rsa. Assuming you have different SSH keys named
~/.ssh/, you may add them automatically on login by changing the above script to:
#!/bin/sh ssh-add $HOME/.ssh/key1 $HOME/.ssh/key2 $HOME/.ssh/key3 </dev/null
It will ask for your password and unlock your SSH keys. Upon restart your SSH keys should be unlocked once you give your kwallet password.
To add a new key and store the password with kwallet use the following command
$ ssh-add /path/to/new/key </dev/null
and append the key to the list of keys in
~/.config/autostart-scripts/ssh-add.sh as explained above to have it unlocked upon providing the kwallet password.
KDE Wallet for Firefox
There is an addon to make Firefox store passwords with KDE5 Wallet.
KDE Wallet for Chrome and Chromium
Chrome/Chromium has built in wallet integration. To enable it, run Chromium with the
--password-store=detect argument. To make the change persistent, see Chromium/Tips and tricks#Making flags persistent. (Setting CHROMIUM_USER_FLAGS will not work.)
Inotify folder watch limit
If you get the following error:
KDE Baloo Filewatch service reached the inotify folder watch limit. File changes may be ignored.
Then you will need to increase the inotify folder watch limit:
# echo 524288 > /proc/sys/fs/inotify/max_user_watches
To make changes permanent, create a