6

Where would you recommend me to store a Keepass file?

Usually I have my personal documents in my Dropbox account. Would it be safe to use Dropbox for this file?

  • 3
    Dropbox is possible the least safe option. Your account can be hacked, their database can be accessed, your data is not encrypted by Dropbox and it is widely used, so a good target. – con-f-use Dec 18 '14 at 12:55
  • You can have it in the root folder provided you are the only person to access your system. If not, you can encrypt your root folder with password. – vembutech Dec 18 '14 at 13:42
  • 1
    @con-f-use "Dropbox is possible the least safe option." That's a bit unfair. People are the weakest spot in ANY security system. Dropbox is no worse than any other in this respect but it does have the distinct advantage that it works extremely well with Ubuntu. Just be sure not to place it in the public access area. – User24601 Dec 18 '14 at 14:39
  • 3
    The keypass database file is encrypted with the master password, so as long as this is kept private there is no problem if others have access to the database file. – Stuart Dec 18 '14 at 14:45
  • No! Dropbox does not use client side encryption, and is therefore only to be trusted with data, you want to make available to everybody. – con-f-use Dec 19 '14 at 14:39
9

If you mean a KeePass password file, there are several arguments to decide where to store it. In my opinion, if the passwords are really, really important to you, you should make the decision based on:

  1. The risk of the file being hacked

    Assuming you have a strong password to open the file, you may assume the KeePass file is rather safe (also see the tip of @gertvdijk at the bottom), however:

    If the time to attempt to hack the file is unlimited, everything can be hacked A location that is (potentially) publically accessible to others is not a good idea, Dropbox or other clouds included.

    You should also make sure others will not be able to copy the file for "further processing".

  2. The risk of losing the file because of disk errors.

    One thing is sure: there comes an end to the life of all disks. That means you should at least have a backup of your file on a (physically) other location.

  3. The risk of burglary / fire

    It sounds a bit overkill, but if you use your passwords in a professional (e.g. services to others) environment, and passwords include access to private data of others, you should make sure you also have a backup of the file on another (secure) location, so that you can at least change passwords quickly in case of accidents.

    If I go on vacation, I make a backup of all my important data and keep it in a safe on another address.

Altogether it is hard to tell you what is the best location. It depends on how important the file is to you, if your responsibility includes responsibility to others, how accessible your computer is to others etc. You should make your own decision, but IMO based on your personal consideration of the risks above.


Tip:

Consider increasing the 'Encryption Rounds' setting in the database settings. This brings down the feasibility of a brute-force attack on your master password down by increasing the CPU cycles needed for each password attempt and therefore reducing the risk of the actual (decrypted, plain) contents of your Keepass database being compromised.

enter image description here

| improve this answer | |
  • @gertvdijk Thanks for the tip / edit! – Jacob Vlijm Dec 18 '14 at 15:15
0

Just store it anywhere. Make duplicates of it. You can upload it every where BUT make your key file common file.

For example. a picture of your pet. just like that. That picture can be mixed with other picture or file. Then upload it in your facebook or in dropbox. Who know that picture is your key file. It is better to be like that. and the best way to hide is to pretend.

My recommendation is base on experience, and there a lot of benefits into it. You an avoid our files to become suspicious.

When you try to use that file. Just download your albums, and choose specific file. and when you do that, i think that is something cool than putting your key file as like a gold, then if that so, bad guys go for your key file.

| improve this answer | |
  • 1
    Reminder: Image hosting services usually don't store an exact copy of the original photo you want to use as a key file and also some Internet service providers have been using "compression" tools to "optimize" mobile broadband networks in the past. (In practice these tools were very old and achieved poor results but they were used none the less and were sometimes cumbersome to turn off.) – LiveWireBT Jul 13 '15 at 7:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.