I recently learned about pass
git integration, which allows to sync my passwords with a remote git repo. Which I instantly didn't hesitate to configure.
So then I decided to clone this repo on another computer (with another GPG key installed) and try to access the passwords. It however complained:
pass myaccount
gpg: decryption failed: no secret key
I guess that comes from the fact that I have another GPG key installed, not the one I encrypted my passwords with (I use the same GPG key ID though).
So, how do I access those passwords without transferring private GPG keys from the original machine to this one? I of course know the passphrase, and can transfer public ones if needed.
Or am I required to copy over the whole keyring?
Thoughts...
Now after writing this post, I think I'm closer to understanding how it works. So basically the keys I can find in ~/.gnupg
aren't just keys - they are encrypted keys. Encrypted with the passphrase. And so it's relatively safe to copy them to another machine. Is it correct?