Each of my phones has its own private key and can decrypt the stored passwords. Having a private key protected only by a six number passcode is obviously a wea

Each of my phones has its own private key and can decrypt the stored passwords. Having a private key protected only by a six number passcode is obviously a weak point in my security. Since password-store is encrypting each password with seven or eight public keys, it's relatively easy to revoke a compromised key and to re-encrypt all passwords/TOTP keys (excluding the compromised key). I mostly generate passwords and add entries to my password manager from a computer but I've got all the required public keys on each device so it's theoretically possible to manipulate the password-store from a phone or tablet as well.