I red about the password management program pass in a question on this forum and decided to try it.
I installed from the download page (tarball 1.6.3).
I created some test entries and then some real entries and committed them to git and pushed them to github. When I looked at my github repository I did see some non
.gpg file with the plain text versions of the passwords pushed to github. Those file also exists local. I have removed my real passwords from
$ pass Password Store ├── test │ ├── test │ └── test ├── test1 │ └── test2 └── test3 └── test4
test is strange already:
$ ls ~/.password-store/test test test.gpg $ more !$/test more ~/.password-store/test/test uJ94!qmv}E\41GjLxJx` $ gpg -dq < ~/.password-store/test/test.gpg uJ94!qmv}E\41GjLxJx`
Is this normal? What can I do against the plain text versions of the passwords being stored?