Secure Wi-Fi Password Storage on an Embedded Device (NetworkManager 1.46)

[Andrei Borzenkov]

On Tue, Mar 18, 2025 at 1:52 PM Juan A. Rubio <jarubio2001 at gmail.com> wrote:
>
> Hi Íñigo,
>
> Thank you for your quick response. While I do plan to leverage the hardware-based solutions in the future, I’m currently looking for a simpler interim approach, even though it may be less secure.
>
> One idea is to create a Network Manager plugin that could salt the password before it’s written to disk. Could you or someone point me to any relevant code sections responsible for writing passwords to the connection files? If it’s feasible, I’d also consider patching that particular logic directly to meet my immediate needs.

If you are ok with modifying NM code - it is in
src/libnm-core-impl/nm-keyfile.c. Otherwise you can always write a
program that supplies secrets via SecretAgent API and this program can
do whatever you want.