Actually, if you look here [1], it says: >While KeePass is running, sensitive data (like the hash of the master key and entry passwords) is stored encryptedly

Actually, if you look here [1], it says: >While KeePass is running, sensitive data (like the hash of the master key and entry passwords) is stored encryptedly in process memory. This means that even if you would dump the KeePass process memory to disk, you could not find any sensitive data. Either way, it is bad that Microsoft does not really warn people about this. [1] http://keepass.info/help/base/security.html#secmemprot http://keepass.info/help/base/security.html#secmemprot