> If an attacker gets access to your machine (e.g. to get your KBDX file), they can get all that other info too. Well in theory yes, but one typically wants to

> If an attacker gets access to your machine (e.g. to get your KBDX file), they can get all that other info too. Well in theory yes, but one typically wants to slow an attacker down. I'm not saying a KDBX file is entirely useless, just cumbersome if an attacker now has to replay the decryption using various disparate key parings. Most attacks are smash and grab jobs where all the low hanging fruit is gathered, and attackers (generally) don't lie around on a box waiting trying to figure out the inner workings of your KeePass setup.