Whenever I open the third party Runescape launcher Bolt, it requests KDE wallet access. I don’t give it access, and everyone says it’s a reliable app. Is it just behaving oddly?

  • HappyFrog@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    8
    ·
    3 days ago

    KDE wallet is the storage for encryption keys. All apps that uses encryption or certificates should ideally use the os storage.

  • terabyterex@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    ·
    3 days ago

    encryption. i dont know anything about the launcher but anything requiring encryption pops it up for me.

    • godlessworm@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 days ago

      thanks, could you happen to explain a bit more? for example, what does the runescape client have to do with encryption? in case i don’t want anyone else to be able to access my runescape account that’s logged into the bolt client?

      • SpinItBetter@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 days ago

        KDE Wallet is primarily a password manager. So if the launcher saves your password this is probably where it is storing it. Why invent your own storage when you can use one that is already built? For more information I recommend the ArchWiki which has plenty of information that is not arch specific. Also if you use Gnome I would imagine it would access Gnome keyring which serves the same function. KDE Wallet

      • xinayder@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 days ago

        I think this is a new feature as it used to store your account tokens as plaintext, no encryption. So it might be something new.

      • cadekat@pawb.social
        link
        fedilink
        English
        arrow-up
        3
        ·
        3 days ago

        Just a guess, but is it saving your RuneScape account information in your KDE wallet?

          • cadekat@pawb.social
            link
            fedilink
            English
            arrow-up
            0
            ·
            3 days ago

            That is certainly possible, but I think the usual flow is for KDE wallet to handle the actual security stuff and the application just gets the credentials