>With pass, each password lives inside of a gpg encrypted file whose filename is the title of the website or resource that requires the password.
Is the filename cleartext or encrypted?
Is the filename cleartext or encrypted?
For instance, to store the password for www.example.com, the filename could be derived by encrypting the website name (www.example.com) with AES using the user's master password, base 64 encoding the output, and using that for the filename.
Filenames readable in cleartext is a security issue. This means whoever has access to your files knows you have accounts on certain websites they are looking for.