3

Using Keepass since a year ago, been told it's an excellent method to store one's passwords.

But what is the best location to save Keepass' file (the file where all password are stored and that you use when reinstalling Windows for example)?

closed as unclear what you're asking by Neil Smithline, Ohnana, Bob Brown, TildalWave, Deer Hunter Feb 8 '16 at 8:27

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 2
    I'm not sure that we can answer "best" for you. – schroeder Feb 7 '16 at 17:45
  • You need to better describe your needs and security concerns before we can answer this. I can say that many people use a USB and/or Dropbox (and similar services) for storing their KeePass file. Keep in mind that the file is secured with strong encryption even if it is leaked to an attacker. – Neil Smithline Feb 7 '16 at 17:56
  • Haven't thought about the file's encryption, so most hackers won't be able to do anything of my file without the master password right? – drake035 Feb 8 '16 at 17:16
3

It depends.

  • Save it on someone else's server (Dropbox, Google Drive, etc.) if you want convenience at the expense of security

    • And the first time you accidentally type your KeePass password into your Dropbox/Google Drive login, you just gave that someone else the keys to open up your password vault.
  • Save it on your own machines, set up so they aren't backed up to someone else's server (i.e. the cloud), and sync the various KeePass files as you need.

  • Save it on your own encrypted machines, on encrypted storage - perhaps LUKS (built into Linux) or Veracrypt, or an Apricorn FIPS 140-2 validated USB drive, or a combination.

  • Save it on your own guaranteed offline, isolated machine/storage

    • For more details on more secure - and less convenient - isolation, see this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.