My biggest concern with pass (even after keeping the password store itself on a Veracrypt volume) is that - authorized or not - typing the `pass` command prints a nice, pretty list of every website/password title in the store. That makes me really uneasy. I considered changing them all to random strings, but that would make it difficult for me to find the password I need - defeating the purpose.

I do love the fact that it uses git though. This is huge when you have it on multiple devices and might, say, add a new password from your phone.

You could put the pass directory on an encrypted filesystem.

I would rather not use the command line to manage my passwords and not everyone can use the command line.

There are a variety of clients for several platforms (desktop and mobile apps, browser extensions, desktop environment integrations). You can use pass without a single console line.

Not sure why this is downvoted, at first look this seems to solve things similarly to GNU pass except pass makes sharing password stores with teams etc smooth. Because of using GPG rather than straight up asymmetric encryption you get a key management for free.

Additionally crypto implementation seems hit well-designed. This would have been a lot better as a GNU pass client - exact same user experience but they wouldn't have to solve several important problems.

Interested in how pass can be used without the command line?

They have some links on their front-page (linked in the top comment): https://www.passwordstore.org/#other

Personally I use qtpass as a GUI manager and passmenu for fetching from clipboard via a keyboard shortcut.

I'm using `pass` for years now and it's perfect. On Android there is the Password Store app which integrates with the OpenPGP app, it's amazing :).

Agreed pass is fantastic. It's built on top of tools such as gpg and git. It's simple and easy to extend or build clients for.