[ylk]

I'm storing a GPG key on a yubikey (set to always require a touch to decrypt [1]) and use that with pass [2].

pass stores the password, username (and whatever else you want) in a simple textfile, which is gpg encrypted. There's a browser extension for it, a GUI implementation and lots more (all on the website at link [2]).

[1]: https://developers.yubico.com/PGP/Card_edit.html [2]: https://www.passwordstore.org/

Edit: Addressing your edit: you could use pass with pass-tomb (puts all the separate password files in a folder and encrypts that, see website) and use a GPG key with password to encrypt all that (and re-enter that on every separate password decryption attempt). Don’t know any other password manager that would allow you to do exactly that..