I use Linux, Windows, and Android. I decided on Pass [1] and it's been working really well for me. I have a dedicated PGP key that encrypts all my passwords, an

I use Linux, Windows, and Android. I decided on Pass [1] and it's been working really well for me. I have a dedicated PGP key that encrypts all my passwords, and they're stored on my own git server. On Linux I use the pass command, on Windows I use QtPass [2], and on Android I use Password Store [3] and OpenKeychain [4] (for the PGP key). My "master password" is the password for the PGP key, and I type it each time I want a password. Git keeps everything in sync. If one of my devices is compromised, you still need the password for the PGP key. If my git server is compromised, you'd need the PGP key (which isn't on the server). [1]: https://www.passwordstore.org/ https://www.passwordstore.org/ [2]: https://qtpass.org/ https://qtpass.org/ [3]: https://github.com/zeapo/Android-Password-Store https://github.com/zeapo/Android-Password-Store [4]: https://www.openkeychain.org/ https://www.openkeychain.org/