

And you can use a keyfile separate from the database for even more security. If the database is backed up on Google Drive and the keyfile is saved on a USB or in a (non-Google) email somewhere for the rare times you add a new device, your passwords should be safe even from keyloggers or Google themselves.


I have the page with instructions for this prominently bookmarked because it was such a nightmare to figure out the last time I migrated my OS to a differently sized drive.