Hello.
I use Kontact for many years, and never realised how unsafe it is (and all Akonadi woodoo thing)
Kontact is autostarting with every login, and all passwords are stored in kwallet under master password. I thought it is enough to secure my emails, todos, etc. from unwanted local access.
Some days ago I turned on computer, logged in, but did not enter Kwallet password. I was chocked, I still can see all emails and everything. The only thing is I can't send/receive anything.

So, What is the meaning of all this master passwords? How can I securely secure my PIM (with KDE tools)?

Regards.

Do you have pam_kwallet installed? Is your wallet using the same password as your user account?

Yes, pam_kwallet is installed. I'm on Kubuntu 14.10, but upgraded year by year fron 12.04, so, maybe something is changed in KDE, and I just need to tune it?
And No. Different password for Kwallet.

kgolubev wrote:So, What is the meaning of all this master passwords? How can I securely secure my PIM (with KDE tools)?

Akonadi only stores the passwords (from your EMail servers, e.g.) in KWallet.

You cannot access your IMAP mails without a password obviously (unless you use disconnected IMAP), but local mails (and other things) are not stored encrypted or password protected.
You'd have to encrypt your /home for that I suppose.

And btw, there's only one "master password", to open the KWallet.