I too use Syncthing to sync the key store, but not the keys. Instead I have my PGP keys on a YubiKey, so I just need to plug in the YubiKey whenever I need to decrypt a secret and I can safely use the same key on all my clients (because I'm not copying the private key, just moving the smart card). It takes a bit of effort to properly set up a GPG smart card without making it impossible to create backups of your master key and encryption keys, but there are good guides for that available online.

/Emil

On 1/14/23 17:23, Zach wrote:
On 2023-01-14 10:58am, Wolfgang Schildbach wrote:

I would like to use pass in a situation where a number of PCs/laptops all have access to the keystore, as well as one or two mobile devices.  We can assume the laptops to be a mix of linux and windows. The mobile devices are Android. I have a git server running in my home network.


So my question is, how are others handling this situation, and am I overlooking an option? Should I be looking at 1) with a keyserver?

I am using syncthing[1] to synchronize the pass keystore and my PGP keys. I just sync the `.gnupg` and `.password-store` directories (along with a plethora of other useful stuff like ssh keys and dotfiles). It's been chugging along in the background of my workflows for almost a decade. From what you wrote, it seems this could fit your requirement.

[1] https://syncthing.net/

Reply via email to