Is there a way to make linux pass ls require decryption?

Question

So pass, the standard unix password manager is great and I've started to use it to encrypt my passwords. But there is one thing that bugs me. When you run pass ls it shows you all your identities. I know it's not the passwords. But this still doesn't allow true anonymity, because if someone were to get hold of your computer, they could trace various accounts to you, even though they would not be able to get the password without your passphrase.

Now I can encrypt the ~/.password-store/ folder myself using gpg-zip and delete the original. Then when I need to use pass I could decrypt/unzip the folder and delete it again when I'm done but that is very tedious to do.

Update 1:

I'm using a Mac.

Answer 1

First sentence of the pass website:

Password management should be simple and follow Unix philosophy. With pass, each password lives inside of a gpg encrypted file whose filename is the title of the website or resource that requires the password

In other words, no, encrypting these within pass is not technologically possible. pass depends on the file name to be the account name.

Personally: You could have a 100MB filesystem image that you encrypt with AES, through cryptsetup / LUKS. It will only be readable for as long as you mount that filesystem – as soon as you unmount it, the files contained in that filesystem cease to "exist" at their known position.