pam-gnupg notes

1 files changed, 19 insertions, 0 deletions

diff --git a/mw.1 b/mw.1
index fc925c3..ef69bf8 100644
--- a/mw.1
+++ b/mw.1
@@ -86,6 +86,25 @@ Google will require you to allow "less-secure" (third party) applications or use
 Protonmail users must use the Protonmail Bridge <https://protonmail.com/bridge/> to access their IMAP and SMTP servers. This too should be configured before running mutt-wizard.
 .B Enterprise and university accounts
 Many universities and businesses might host their domain's email via Google or another service. This often requires a special IMAP/SMTP-specific password that you must generate and use. Again, mutt-wizard can handle these systems, but only once they've been set up.
+.TP
+.B Password decryption
+mutt-wizard uses
+.I pass
+and therefore
+.I gpg
+to decrypt your passwords. Provided your GPG key has a password, this might mean that you will be prompted for your GPG password the first time you sync or send mail in a session. Once your password is cached, it might also expire later as well.
+
+Because of this I strongly recommend the program
+.I pam-gnupg
+<https://github.com/cruegge/pam-gnupg> which automatically unlocks your GPG password on login and keeps it active, thus giving you, with mutt-wizard, secure access to all your email accounts on your system without ever having to input a password.
+
+If you don't want to use this program, you can also increase the cache time of an inputted GPG password with the
+.I default-cache-ttl
+and
+.I max-cache-ttl
+variables in your
+.I
+gpg-agent.conf.
 .SH MUTT-WIZARD'S NEOMUTT CONFIGURATION
 Here is a list of not only mutt-wizard's particular defaults, but what you need to get the most out of email accounts configured with mutt-wizard.
 .TP