I wanted to ask from community here that what is your standard practice when you want to get some files from Vault to like on usb-stick. Is it okay to attach usb stick to Vault VM? I have read somewhere from Joanna that data flow from untrusted VM to trusted VM may be ok until reverse flow is not p…

Is it okay to attach usb stick to Vault VM In short, no. data flow from untrusted VM to trusted VM may be ok depends on what you are defining. https://www.qubes-os.org/doc/copying-files/ " one should keep in mind that performing a data transfer from less trusted to more trusted qubes can …

[image] Plexus: In short, no Then can you propose some secure way for like if I want to have a copy of my .gnupg folder and keepassxc database on external media. [image] Plexus: This depends on your threat model and if you are happy with putting passwords into clipboards. Then What sh…

Then can you propose some secure way for like if I want to have a copy of my .gnupg folder and keepassxc database on external media. Pretty much the same as earlier, but in reverse. Create an isolated disposable VM. Attach the external media from the USB qube to that disposable VM. copy the files…

[image] wobo: is it okay to use qubes.clipboard for copy and paste passwords from Vault to like mailvm? just to troll…if vault has both ‘disk encryption password’ and ‘gmail password’…what will prevent you pasting disk pw in the gmail password box in mailvm and hitting submit before you reali…

Btw I don’t keep disk encryption password written anywhere. ( by anywhere I mean not on any disk/cloud/paper.) Same goes for keepassxc database master password. I am still looking for a method like splitGPG if possible for password also, if I understand properly the splitGPG concept.

I strongly recommend the Qubes backup system , which was designed for precisely this type of use case. It performs all of the required authentication and encryption steps for you in a way that makes it hard for you to mess up. (For example, if you’re not sure whether you should encrypt-then-MAC or MA…

Qubes OS Forum

Some Common Questions

User Support

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled