MiniKeePass/MiniKeePass — Issue #51: Enhancement: Clear Kdbx file (from dropbox) after x minutes
Author: ced2git
Created: 2011-12-30 23:28:17+00:00
State: open

Hi,

Would it be possible to provide a feature where no local copy of the kdbx is kept or kept for a limited (settable) time.

Why ? i will try to explain myself.

I do use keepass to store all my password and the aim is to improve the security by having complex password and always different. This file is probably the most important of any files in your computer. I do use dropbox to have only one file and share it between home computer, corporate desktop, corporate laptop and my phone with MiniKeepass.

The probem with MiniKeepass (and all other software) is that it do keep a copy locally on you phone. Just use iExplorer and you will see it. By nature, you take your phone with you outside and therefore you increase the risk of loosing the phone in a bar, on the road... in fact each time you take it outside your pocket.

Now, let's assume, i loose my phone and someone get it. To protect my data, the first thing i will do is to

1) Modify passwords of all email accounts configured on the phone
2) Modify the passowrd of my keepass file and the password of my dropbox account to prevent any access to this kdx file.

The probelm is that the second action is useless because minikeepass keeps a local copy. Yes, there is a protection to clear the file after 3 failed tentatives.... but with iExplorer, i can copy the file on a computer and do all sorts of brute force.

So my request is the following: Providing an option in miniKeepass to clear the file not only after failed tentatives but also after a period of time. I understand that i would required to redownload the file each time.... but this is the price to pay to protect my password repository.

Thanks to evaluate this....