[zeveb]

My one concern with pass is that it doesn't encrypt filenames; it's a real pity, as that's an information leak itself.

[oscii]

I mitigated this by storing username in the gpg file itself using the 'user:' tag, while having the file named jdoe or something similar instead of a login name.

[tanderson92]

Have you tried to use pass-tomb?

[ufo]

I'm not the parent poster but the added friction and configuring for pass-tomb made me choose to just use keepassxc instead. IMO, this kind of feature should be the default.