This is what I've used for quite a while. It's not the fanciest, but it is simple and easy to use.
For backup, I use duplicity to encrypt my .password-store and all other private files. I have it spit the output to my dropbox folder so it syncs automatically.
This keeps what sites I have passwords for hidden from the outside world.
I've looked a little into keeping the entire .password-store folder encrypted locally until I try to use it, but I guess I'm not paranoid enough for the hassle.
Last time I checked this it would store metadata about the passwords in plain text (file and directory names). Did that get fixed yet?
This "issue" has been fixed with the pass extension 'pass-tomb' that keep the whole tree of password encrypted inside a tomb
command-line, encrypts passwords with gpg, synchronises using git and by default only copies the password to the clipboard and automatically wipes the clipboard after a minute