Kicksecure Offline Mode

From Kicksecure
Jump to navigation Jump to search


On offline systems it makes sense to disable sdwdate and Boot Clock Randomization since it's not needed in offline VMs and can interfere with Two-factor Authentication (2FA) code generators. [1]


1. Disable networking.

  • If a VM, remove its network interface or its virtual network cable.
  • If a physical computer, remove its networking hardware if possible. Do not connect a LAN cable and turn off WiFi.

2. Disable sdwdate.

sudo systemctl mask sdwdate

3. Disable bootclockrandomization.

sudo systemctl mask bootclockrandomization

4. Done.


  1. Could interfere with TOTP (time-based one-time password) based 2FA code generators.

Unfinished: This wiki is a work in progress. Please do not report broken links until this notice is removed, use Search Engines First and contribute improving this wiki.

We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!