pass-tomb VS passforios

By itself, Passwordstore will not encrypt file names or directory names, which might not be a problem if no one else has access to the machine that hosts your git repo, but if that's not the case (even if it's a private repo on whatever platform), you might want to use either Tomb or git-crypt-remote to have full end-to-end encryption. There are even some tools that glue tomb and pass together (https://github.com/roddhjav/pass-tomb for one), though I'm not sure what's the situation is like when it comes to mobile integration with tomb/git-crypt-remote.

That can of course be fixed by using pass-tomb, but that isn’t implemented in mobile clients (at least not on iOS).

- https://pujol.io/blog/tomb-with-gpg-keys/ - https://github.com/roddhjav/pass-tomb

A plug-in called pass-tomb exists to fix this, but doesn’t work with mobile apps (a least not iOS)

Yes you can, you can use the https://github.com/mssun/passforios app which as of over a year ago supports Yubikeys.

The UX of having to grab your Yubikey every time is a bit clunky though (although that is limitation of the security key medium itself rather than the app).

But there is, and it supports OTP where if I remember correctly is a paid feature for Bitwarden. https://github.com/mssun/passforios

But who you gonna trust then? It's open source[1] at least, so you can always review it yourself.

But from "paranoid" point of view you can't verify is this is the same code used in app and all of currently available stores lacks in reproducible builds department. So it's always a tradeoff between ease of use and hassle.

[1]: https://github.com/mssun/passforios

https://github.com/mssun/passforios which also uses the safari password manager flow so its pretty seamless

passforios

Many Linux folks use pass, which I personally love for its simplicity and easy way to synch on different devices. There is an iOS (and an android) app.