Hey guys, I wanted to ask you how you manage your gpg keys? Having them in plaintext all the time on my hard drive feels unsecure.

I have my ssh keys in a password manager (KeePassXC) that only exposes them to the keyagend, when unlocked. Do you know if something like that exists for pgp too?

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 year ago

@Zenlix A hardware solution is the best route, Yubikey and/or smartcard.

  • source