I save a copy on my PC regularly (because I use keepassdx primarily, an android-only client), and I upload it to signal. Yes, I use signal as cloud storage, and it works really well! I have peace of mind that the file is encrypted using top-notch encryption, and only accessible by my linked devices.
I am shocked how many ppl think synchronization like syncthing act as a backup.
No synchronisation is not a backup. If you accidentally delete the database and it syncs across all devices then the database is gone. If something is broken and overrides multiple times then the history if it is enabled is also gone.
Pls use proper backup methods to backup your database.
Edit: I sync my database also with syncthing across devices. But to back it up i have on multiple clients system backups running that include the database.
Syncthing can store multiple versions of things…
So, when you activate simple versioning, and keep the last 20 Versions, then an error occurs (or malicious actor) and overrides the file 20 times. Then the simple versioning is gone.
Yes with the correct setup you could probably backup via syncthing BUT no one in the comments ellaboborated and mostly just says “i sync to multiple devices via syncthing”
Yeah, syncing with default settings is a bad idea for backup, but it’s better than nothing.
A more robust set up, while not foolproof, is to set history to keep all copies for 30 days, not a fixed amount of files. It’s also important to set conflict detection so if the file is modified on two devices in between syncs, it will keeps both copies (and cross-syncs them).
That’s not my experience, at least with MEGASync.
It is backed up alongwith everything else, all my data, under a normal 3-2-1 idea, but 5-3-1.
Each of the copies on separate media inc my main PC is also versioned. I keep 12 hourly versions, 7 daily versions, 4 weekly versions, 12 monthly versions, and then per-year versions going way back. This helps protect against corruption, like I accidentally deleted an keepassxc entry without noticing right away or w/e.
I try to follow the 3, 2, 1 backup procedure:
- 3 copies
- Spread across at least 2 devices (Computer, Server, other devices)
- At least 1 copy on a separate storage disk (USB flash drive)
This is the way…
Your KeePass; your documents; your personal data; and your photos.
3-2-1-1 all the things
I manually copy it to my phone, a thumb drive, a cloud service and another computer whenever I change something. I also let the filename show on which device and on what date the files was last modified. Example:
Passwords_MY-SMARTPHONE_260314.kdbxWhen I was still using it I used Syncthing to distribute copies to multiple devices and that distributed nature also functioned as a backup.
I usually make a copy once a month of my database, I save it on an external hard drive that I can connect via USB, it probably is not the most practical way but at least it is the best way that is found
Manually make a backup with the date in the file name stored in another folder and on a thumb drive.
All my systems backup to a remote box that has a hotswap bay that I rotate the drive every few weeks between another drive. The drive out of the hotswap bay is stored in a fire safe.
This is more all for images and documents, but everything gets the same backup since it’s whole systems. The backups are rsync with hard links so they take up less room.
I keep multiple dated backups made using a script shell + crontab, to automate the thing.
I have mine on a nas server synced with nextcloud.
I backup the file to a separate ssd on a different machine every few days and then backup on a USB in a fire wallet every few months.
It lies on my cloud which I backup regularly to a spare computer via restic.
Yunohost + Nextcloud
I manually copy it to Proton Drive and access it via android with KeepassDX
Syncthing between my phone, my server, my laptop, and a cloud backup. Home server is always on so it “remembers” the sync to propagate to devices that were not turned on or connected to the internet when the change was made, cloud backup in case of catastrophe
I sync it using my pCloud folder. In case I’m away and I need access to them, I also have a cron job that copies the most recent version to a webserver I have, under a directory I only know of, protected by a password. My .kbdx files also need a credentials file that can be generated programatically. Secure enough for me.








