> a private key encrypted with a password is not cryptographically different from a plaintext private key It is different. Keybase could update the app to stea

> a private key encrypted with a password is not cryptographically different from a plaintext private key It is different. Keybase could update the app to steal your key, but that’s a visible attack that can’t be done retroactively. > If it was truly secure, then you'd be using a new private key to encrypt your real private key There’s no reason to use asymmetric crypto for symmetric encryption.