I like the security of knowing in case my home/office blew up or was ransacked, all my keys would still be secured and, just as important, be available to me immediately online.Īnother key advantage is that I can mount the cloud provider service as a drive on any computer, and have read/write access to my keys, passwords, etc. Using a strong pass phrase (I use 25 chars), KeePass is extremely secure., and is nearly impossible to brute force in any reasonable time frame. This data file can then be securely stored in the cloud via a cloud storage provider eg DropBox. KeePass encrypts the database with the AES. I store all my private keys in KeePass Password Safe 2.0, a free, open source, cross-platform and light-weight password management utility. While a physical location is secure physically, there is some risk of losing the flash key, CD, etc to theft, fire, or other disasters/hazards. Once you determine that data's long-term value then choose the appropriate way to protect it.
You may also find that the use of several keys (low security, medium security, and high-security) may be helpful because you may find that you are ok with having your low-security key on one computer whereas you may decide that your high-security key will never be used on a computer connected to the Internet and that you keep it on a USB flash drive locked in a safe or something.Īgain, the data being protected needs to be driving your decisions. I also recommend having one local encrypted backup (same building) and at least one off-site encrypted backup of these keys.
One thing I do recommend is that you keep them encrypted and ideally not directly on a computer connected to the Internet unless it's something you will use constantly. Given I have no context as to what these keys are used for, or their value, or frequency of use it's hard to make recommendations. You could look at one of many Key Management standards like the following NIST guideline but ultimately the level of security is probably dictated by the value of what is being protected.
0 kommentar(er)
