4

I've setup up Pass with a GPG key. That key expires at some point in the future. In preparation for this event, how would I update Pass to use a new Key? Do I just manually update the key id and password file that Pass uses?

Improve this question
4
  • 1
    the man page describes ~/.password-store/.gpg-id have you tried looking in there for clues? I don't know this utility, never used it. but that's where i would start.
    – Nalaurien
    Commented Jun 9, 2017 at 1:41
  • yeah that was my first stop, it's not clear to me how to update the key.
    – shusson
    Commented Jun 9, 2017 at 1:46
  • nvm it was in the man page all along.
    – shusson
    Commented Jun 9, 2017 at 1:53
  • glad you got it sorted :) hah, yeah its in the text for the first item, looked over it the first time cuz i thought it was only for initialization.
    – Nalaurien
    Commented Jun 9, 2017 at 1:55

2 Answers 2

Reset to default
4

After looking closer at the man page you can update the public encryption key with:

pass init [ --path=sub-folder, -p sub-folder ] new-gpg-id
Improve this answer
3

Alternatively, you can simply extend the key's validity period by running gpg --edit-key <key-id>. Anyway, key expiry dates don't really add additional security.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .