keepassxc vault and ssh keys live in an AES-256 encrypted archive on multiple media which is a complex way of saying I periodically zip them up and put them on

keepassxc vault and ssh keys live in an AES-256 encrypted archive on multiple media which is a complex way of saying I periodically zip them up and put them on a memory stick, I don't hide the memory sticks because you can't mount them without a LUKS password that's in my head. Nothing convoluted about it, plug in memory stick, enter password, run script, unmount volume chuck in bowl next to PC.