<html><head></head><body>Oh, yes, that's for sure. You need to change everything, every password. I was just answering the question of how to remove a key id.<br><br>Also, if using a shared remote repo, the write access must be revoked from beforehand, else the leaving user can re issue pass init... and add their key.<br><br>Cheers !<br><br><div class="gmail_quote">On November 8, 2018 2:04:01 PM GMT-03:00, Kjetil Torgrim Homme <kjetil.homme@redpill-linpro.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">On 11/8/18 4:28 PM, HacKan wrote:> Simply issue pass init again with the<br>new keylist, that's it :)<br><br>not really, since the person who left the team can check out an old copy<br>of the repository and use the key which was valid at that time to<br>decrypt all passwords.<br><br>I am afraid all passwords must be changed to be sure. of course this<br>will always be true - that person could even have printed the passwords<br>and put them in a bank vault, where you can not get hold of them to<br>destroy the copy.<br></pre></blockquote></div><br>-- <br>HacKan || Iván</body></html>