3 ms·

I export our 1Password vaults more or less quarterly, encrypt them using openssl, and stash them in an encrypted, expiring, s3 bucket.