![]() The app might contain vulnerabilities that another app could exploit. It is not just that you have to trust the developer of the app. I always feel somewhat queasy when I allow an Android app to access Dropbox. ![]() In this case, you might prefer Keepass2Android Offline, which doesn’t support cloud syncing. ![]() Of course, you can also store database files locally on your phone. In addition, you can load the KeePass database from a third-party Android app. Keepass2Android supports Dropbox, OneDrive, Google Drive, SFTP (SSH file transfer), FTP, HTTP (WebDav), and HTTPS (WebDav). I recently moved to Keepass2Android, mostly because it allows me to sync the KeePass database with my cloud drive more conveniently. I have been using KeePassDroid, the most popular KeePass-compatible Android app (according to the Google Play statistics), for quite a while. This doesn’t completely eliminate the risk because KeePass could contain security holes that an attacker might be able to exploit, but you have to draw the line that separates security awareness from paranoia somewhere. If someone manages to download your KeePass database from your cloud drive, he would still need the key file from the second cloud drive and your master password.
0 Comments
Leave a Reply. |