I'm currently using pass as well. Since I set it up I started just dumping randomly generated passwords into it. I just start up 'pwgen -A 20' and pick a new one whenever I need to set up something. I have no Idea which passwords I currently use for most of the newer things I set up, but I guess thats alright: half of the tim it is a service where I can use email recovery or sth similar and the other half of the time it is a linuxmachine/vm/container where I have physical access anyways..

Using pass with dmenu or rofi is kinda neat, however there have been some issues with it: when I'm using dmenu to autotype within i3 for example I end up typing my passwords into the wrong windows sometimes.. guess I have to take a look at my script, when I have time for it. Other than that pass is really nice to use. It also has some git functionality build in so there's your version control..

As an addition to pass you could buy yourself an yubikey [2].. it's basically a small little device where you can dump you gpg keys for example and every time you need to access pass you can unlock the password store by touching the device instead of entering a password. You cannot read from the device, but I believe you can delete its contents. A friend of mine has a yubikey set up with pass. Looks really nice!

I wouldn't use any web based solutions however, since there seem to be security issues with most of them on a fairly regular basis, e.g. [0,1]. Most of them probably work similar. Software which embeds some JS snippet into random browserwindows and then starts serving my credentials.. kinda creeps me out.

[0] : https://bugs.chromium.org/p/project-zero...ail?id=917
[1] : http://thehackernews.com/2016/07/lastpas...nager.html
[2] : https://www.yubico.com/