need to get some advices on KEEPASS-file: where to store

[unleash_it]

Hi there

need to get some advices on KEEPASS-file: where to store

I'd just like to check if there's anything I may have overlooked in the issue of where to store the KeePass database and a keyfile for it.
I just realised that I'd always visualised using a 'fixed' location for a KeePass database on one or more synchronised PCs, and a 'movable' location for a keyfile

well i thoght of using a USB stick that I plug in to each PC as I use it.

what do you think about this idea. Is there any practical difference between having the same keyfile permanently stored on every PC I use and carrying my database around from here to there on the USB stick?

pros and cons:
The only advantage I can see is that I would have only one database file and it can never be out of sync.

well what are the possible scenarios.

I also understand the concept that keyfile and database have to be maintained very well in order to work together.

but lets imagine if we say that components A+B have to be simultaneously available to access my passwords, then does it really matter whether A is the database or A is the keyfile? The main difference I think is that the database contents are likely to be not the same.

well if it comes to the disadvantages? I can't see any, but I'd be interested to hear views. To permit usage on any PC, including one I'd never visited before, I could even store a copy of the keyfile in Dropbox or wherever. The keyfile in itself doesn't hold any valuable data so protecting it is not really an issue. Or is it?

but wait: it is like if i am carrying my door with me everywhere I go and leaving lots of copies of my key lying around in public. But if I'm the only one with the door, so what do you advice here.

what can i do to make it better to make it safe?

[nemesis]

To be nearly 99% safe, you need keepass on a device without any wireless connection (like an old smartphone in airplane mode) and maybe 2 factor auth. to open your database on that device (yubikey and so on).
You always have to type in your password per hand on an trusted device and operating system/browser.
For surfing you can use one of those live distributions that start from an dvd.
https://tails.boum.org/index.en.html

There are some ways available to steal credentials from your browser or even your keepass database. So it's not an good idea to spread them over a few devices.