Recommend keepassx over keepass (mono), extra credit section
Spearphishing section
More extra credit
Signature file for authenticity