Ask HN: How do you manage your secrets (gpg keys, etc)

Hi!

I've been getting a lot more into using git-annex[0], and I was thinking about the best policies for my personal secrets, as I want to encrypt and distribute my data everywhere now that I have a tool to do it. Currently I'm using LastPass + a usb drive of gpg private subkeys (mostly online) + print outs of revocation keys + another usb key with the master key (only use offline)

What software are you using?

e.g.: 1Password, KeePass, LastPass, gpg -d passwords.txt | grep ycombinator, dropbox with stealmystuff.txt..

What hardware are you using?

USB keys, yubikey, mobile phone 2fa, paper and pen, printers.

Just curious what the current best practices are, and what things have worked on the longest timescales.

[0]: https://git-annex.branchable.com/