Hey guys, I wanted to ask you how you manage your gpg keys? Having them in plaintext all the time on my hard drive feels unsecure.
I have my ssh keys in a password manager (KeePassXC) that only exposes them to the keyagend, when unlocked. Do you know if something like that exists for pgp too?
If the private keys have a passphrase they’re already encrypted. The fact that it’s a text file doesn’t mean it’s a plaintext file. But for improved security, you could use a Yubikey or similar hardware token.