For migration I exported private/public key pair from OSX to whonix. I exported the file to my filesystem and opened the asc file with textedit. The private key to my surprise was in plaintext! I copied the key over to my whonix workstation and imported it into my keyring. I'm surprised to see that in order to use it to decrypt the same passphrase also works for decryption. However, because it was in plaintext when I migrated the key I'm wondering where the encryption passphrase is being stored and how it was transferred. I'm in the process of destroying my keychain on OSX and migrating my keys to more secure locations. Now that I have imported the key: Is it encrypted or is it just in plaintext on my OS?
Should I be saving my keys encrypted on a thumbdrive instead of trusting the keyring to store them?