I am not sure I understand the point of using TPM + PIN to decrypt the drive for... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		prmoustache on Sept 15, 2024 \| parent \| context \| favorite \| on: Installing Arch Linux on a Laptop I am not sure I understand the point of using TPM + PIN to decrypt the drive for a single user system. I am fine just using the passphrase and I just configure my graphical login manager to log straight to my preferred user on start in order to not have to type crefentials twice at boot time.

AlphaJack on Sept 15, 2024 [–]

I found TPM + PIN to be more secure than TPM automatic unsealing, and faster than typing my long passphrase. I haven't tried pam_autologin yet, but I see the convenience of it.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact