[pass] How to migrate database with expiring GPG key?

Andrew Todd at at auspicacious.org
Fri May 20 03:12:35 CEST 2016


On Thu, May 19, 2016 at 11:32 AM, Brian J. Duffy <bduffy at gmail.com> wrote:

>
> What's the best way to transition pass to a new key?
>

As mentioned, the prevailing wisdom is not to rotate PGP keys too often,
although there's arguments for both sides.

That being said, if you need to do so, you can re-run pass init <gpg-id> on
an existing repository. Existing keys will be decrypted and re-encrypted
for the new gpg-id.

In fact, you can supply as many gpg-ids as you want to the command, so you
can re-encrypt the files for both the existing key and the new key by
passing both IDs.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zx2c4.com/pipermail/password-store/attachments/20160519/45f91b4a/attachment.html>


More information about the Password-Store mailing list