Of course, that was just for demonstration.

Though after a campaign has hit level ~8 or so it can be a fun reward to players to let them just squash a group of 1st level mooks as a kind of reminder of how far they’ve come since 1st level. At 9th level it’s reasonable to have +20 to your attack, and an NPC only has an AC of 10…

AC is only line of defense; don’t forget your reflexes and will can be targeted to do much worse things than just hurt you.

In Pathfinder 2e it is not true that rolling a 20 means an automatic hit. Rolling a 20 only automatically increases the degree of success by one. For example; if a character with +0 to their attack rolls a 19 versus an AC of 30 it results in a critical miss (19 is more than 10 below the target number). If they roll a 20 however it gets upgraded by one level and becomes a regular miss.

At some point you have to assume that even if they can walk on the seabed that the physical pressure would just disintegrate their bodies. If the powers of necromantic reanimation can be overcome with a sword or a shotgun then surely several atmospheres of pressure applied across the entire body would do it.

Jaysus christo this is fucking weird and insane. And there is such an obvious, easy answer for the whole “problem” (of course there is no actual problem, this is insane fear mongering and hatred, but still…)

America: GIVE PEOPLE (ALL PEOPLE) PRIVACY IN PUBLIC BATHROOMS. Stop using “stalls” with gaps so large there may as well not be any dividers. Just look at a European bathroom where the toilets are in their own small rooms with doors that run from floor to ceiling. Seriously, you could remove the gender separation entirely and it wouldn’t affect anything.

There has to be, the PasswordStore app for Android can keep the GPG files in a storage location where other apps can read & write them. All you need is something to handle the synchronization.

I’m a control freak and prefer to do things like that manually, so I just use the built-in git & SSH based method it provides.

That entry names are stored in plain text doesn’t bother me; if somebody has broken into my system so well that they’ve copied my password store then the last of my concerns will be if they can easily find out if I have a password stored for example.org or example.net. At that point it doesn’t matter if they can tell that I have a Jellyfin password stored, because that service is running on my server with clients installed on my phone & tablet.

And I handle key storage with a pair of Yubikeys which hold a copy of my private key. It can’t be extracted (only overwritten). There is a physical copy kept on offline, disconnected storage, which could be an attack vector – but if we’re at the point of somebody breaking into my house to target my password management then all bets are off: you don’t need to break my kneecaps with a hammer for me to tell you everything, I prefer to keep my knees undamaged.

For attachments I just add another entry; /services/example.org-otherThing - there’s nothing stopping you from encrypting binary data like an image.

And when it comes to convenience: I have a set of bash scripts that use Wofi to popup a list of options and automatically fill in data. Open example.org click the login field, hit meta-l, type example.org, hit enter and wait a moment: it’ll copy and paste the username, hit tab for me, then copy/paste the password, then copy a bunch of random data into the clipboard buffer like 10 times before copying an empty string another hundred times to flush said buffer. meta-f for username only, meta-g for password only; it’s honestly way more convenient for me than the 1Password setup I use at work.

I understand the point the video is making, but I think it’s irrelevant if you keep the private key on something like a Yubikey.

I use passwordstore.org which is basically a bash script that wraps GPG; but there is an Android client as well.

Everything is stored in encrypted files tracked by git. Files are synchronized by git/SSH to a server I run.

That’s fine, I don’t require players take advantage of it. Spend your time crafting, resting, whatever. It’s all just a game in the end.

One of my long standing house rules when I’m DM is to let people just be as creative as they want during downtime, as long as it doesn’t affect the story. Druid wants to spend all day wild shaped as a turtle, hanging out in the pond? Sure, go for it - I’ll ignore the X/hours per day limits or whatever. The wizard wants to cast Wish just to create a sick looking pipe to smoke from? Amazing, no XP or gold cost for that. Fighter wants to use Action Surge repeatedly to chop an entire tree into firewood for their winter log cabin? Don’t forget to mount a deer’s head above the fireplace.