KeePass is the perfect example of simplicity over complexity. It does exactly what it sets out to do and it does it well. Unlike online services, I trust it who

KeePass is the perfect example of simplicity over complexity. It does exactly what it sets out to do and it does it well. Unlike online services, I trust it wholeheartedly, because it is free software, well-built, simple, and basically a fancy XML parser with encryption. The less it does, the fewer ways it can break or be broken. The attack surface is tiny compared to, say, LastPass. You choose your own sync solution, unlike LastPass/the like. What's the new standard for AES passes? Patch notes mention it but not the number.