There's nothing wrong with storing them on a server you don't own... just so long as all information the server sees is encrypted. E.g. you can keep your KeePas

There's nothing wrong with storing them on a server you don't own... just so long as all information the server sees is encrypted. E.g. you can keep your KeePass file on DropBox because DropBox only sees the encrypted file.