Cybersecurity

5672 readers

114 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

Uploading keepass database to the cloud? (self.cybersecurity)

submitted 1 year ago by vsis to c/cybersecurity@sh.itjust.works

19 comments fedilink hide all child comments

Is it insecure to upload Keepass database to Google Drive, Dropbox or any other file service in the cloud?

I've read this answer in Security Stackexchange: https://security.stackexchange.com/a/45337

So, I feel kinda confident if a put a big number of PBKDF2 iterations, like 10.000.000, it should be OK.

My master password is based on diceware, but is not very very long because I need to remember it.

What do you people think about this?

you are viewing a single comment's thread
view the rest of the comments

[–] Alatarius@sh.itjust.works 5 points 1 year ago* (last edited 1 year ago) (3 children)

I keep mine in the cloud but I also have a key file attached to it. That is not kept in the cloud so at least I have some security if the cloud service gets hacked and my password is 57 characters long.

[–] vsis 2 points 1 year ago (2 children)

I get it. But if I have to carry the key file everywhere to every device, I can just carry the database file.

[–] Alatarius@sh.itjust.works 1 points 1 year ago

Understandable. I don't go very many places so this way is most convenient for me. For your situation I'm not real sure what would be the best practice for you, but I will be keeping an eye on this thread if someone has a better answer

load more comments (1 replies)