I'm storing a GPG key on a yubikey (set to always require a touch to decrypt [1]) and use that with pass [2]. pass stores the password, username (and whatever

I'm storing a GPG key on a yubikey (set to always require a touch to decrypt [1]) and use that with pass [2]. pass stores the password, username (and whatever else you want) in a simple textfile, which is gpg encrypted. There's a browser extension for it, a GUI implementation and lots more (all on the website at link [2]). [1]: https://developers.yubico.com/PGP/Card_edit.html https://developers.yubico.com/PGP/Card_edit.html [2]: https://www.passwordstore.org/ https://www.passwordstore.org/ Edit: Addressing your edit: you could use pass with pass-tomb (puts all the separate password files in a folder and encrypts that, see website) and use a GPG key with password to encrypt all that (and re-enter that on every separate password decryption attempt). Don’t know any other password manager that would allow you to do exactly that..