>>63472372
I'm currently looking at using pass as my password manager. I am quite new to using GPG, however, and I'm unsure of the best scheme to use for managing my keys (that is to say, something that is a reasonable mix of being secure and convenient).
Should I create a separate pair of keys specifically for use with pass (that is kept entirely private), and another for use for communications/identification? This seems logical to me given that, should the password manager keys be compromised, your proof of identity/communication keys wouldn't also be compromised.
Next, if I do create a key pair specifically for pass, would it make sense to use non-identifying information for the user/email/comment fields? After all, if an attacker got hold of your pass-specific, private key pair, but it contained identifying information like your real name and email address, could that be used against you somehow, i.e. posing as you in some way, or does it not matter?
And lastly, is there any point in using subkeys if the key pair isn't intended for personal identification/communication? I know you could generate a new set of subkeys and reencrypt your password files, but would it be better to just make a new keypair altogether?
I guess it boils down to if it's worth it to use your main key pair for pass, since that seems to be what a lot of people do. I'm probably overthinking this.