Keepass with online backup service?

limitedaccess

Supreme [H]ardness
Joined
May 10, 2010
Messages
7,594
Not sure if this better suited for here, data storage or general software.

I'm wondering about the security implications of using keepass with an online backup service such as dropbox or spideroak?

Also which service would you recommend for doing such a thing (along with other encrypted documents)?
 
I have always wondered this my self. I use keepass with a strong password and key. The database file is stored in dropbox so it updates across all my computers. The key is stored in a separate directory on the computers outside of the dropbox sync. Seems to work for me. For added security, I rotate the key every now and then.
 
Well the database file is encrypted, so even if someone got access to your dropbox account, they'd still need a key file or password to open the database file. So as long as you keep your key file secure or use a good password, you should be safe.

I've been meaning to set this up, having my keypass database files synchronized across my computers and possibly my phone.
 
I guess I will just up the key transformations and DB password lengths and do this then.

Or is anything over the 1 second delay for key transformations overkill?
 
Dropbox is not backup! It is a file sync service. This is not the same - a deletion of an item on one device will remove it from all sync'ed devices. There have been cases of glitches on Dropbox's servers deleting data from people's devices.
 
I haven't really looked into these services yet but I was under the impression that you could make manual uploads without relying on sync?

If not what service would you suggest that is free for such small files? I mainly need another source due to the possible issue of "physical" related losses.
 
Back
Top