how to make 1Password save your two-factor token on Arch Linux
This information was gathered from another source. I am only putting it here because I deal with this often enough and I want to put this in a place where I know I can get back to it later. Thank you to bluecrow.net for this information!
let’s set the scene: you’ve just done a fresh Arch install. you go to install your password manager and it prompts you for your two-factor token. easy enough, right? you enter it. it won’t save. it asks you for it every time & no matter what you do, it won’t stick. you’re beating your head against the wall. what is a girl to do?
Install gnome-keyring#
even if you’re running a flavor of KDE or what have you, gnome-keyring
is seemingly the only
keyring that will cooperate. kwallet
is simply an enigma to me. it doesn’t exist. pacman -Rdd kwallet
and never worry again. (disclaimer: that command may break your system if something
relies on that package!) the package name should just be gnome-keyring
. link to
archwiki if you need it!
Set up PAM (Pluggable Authentication Module)#
put the following lines in their respective files.
in /etc/pam.d/login
:
auth requisite pam_nologin.so
auth include system-local-login
auth optional pam_gnome_keyring.so
account include system-local-login
session include system-local-login
session optional pam_gnome_keyring.so auto_start
password include system-local-login
in /etc/pam.d/greetd
auth required pam_securetty.so
auth requisite pam_nologin.so
auth include system-local-login
auth optional pam_gnome_keyring.so
account include system-local-login
session include system-local-login
session optional pam_gnome_keyring.so auto_start
Log out and log back in#
mhm. yep.
Create a keyring#
install and open seahorse
, a keyring manager. click the plus sign at the top right, and create a Password keyring. name it whatever, the name does not matter. set the password to whatever password you use to log into your user, and continue. right click on the keyring you created, and select Set as default.
Quit and reopen 1Password#
when it asks for your 2FA token, enter it and it should save! check seahorse
just to make sure
there’s a new entry in there. yay, you’re done! now you can sleep.
special thanks again to the person at bluecrow.net! :)