[hughc]

You've added another dependency into the mix here.

I've been comfortable storing my database in Dropbox, with a decent length master password (15char+) on the assumption that it uses a high quality hash that would make bruteforcing the encryption impractical, without having to add another layer of encryption above it. Curious if others feel this is a reasonable assumption?

[jcculb]

I do that and keep a Key file locally off Dropbox. The combination should be pretty secure.

[VexXtreme]

I do the same. 20+ character master password and Dropbox. Not worried at all.