4 ms·
It can be a problem if you want to back up the password database to the cloud. That's part of the threat model for most other password managers, which use a si
by ufo 6y ago
It can be a problem if you want to back up the password database to the cloud.
That's part of the threat model for most other password managers, which use a single encrypted file for the database. Pass is the only popular one I know that stores part of the information in plaintext.
- woodruffw 6y agoI don't actually use pass, but as an idle thought: if you're concerned about this sort of metadata when syncing your `pass` store to a cloud provider, why not take advantage of the GPG key you already have and encrypt everything as a single blob in one shot? You pay a little more with each synchronization, but probably not enough to worry about for reasonably sized stores.
- ufo 6y agoThere are pass extensions that encrypt the metadata but I don't know why they are not the default.
- deleted 6y ago[deleted]