Is keeping a KeePass file in Dropbox safe?

The question here is not whether you trust dropbox, but whether you trust keypass. If your password vault gives up its secrets when someone else gets hold of it, then you will want to find something else. Keypass uses AES-256 for encryption, which remains the de facto standard, and SHA-256 to create a key from your passphrase along with a salt. So the encryption method is good. So then you'll want to consider if there are any implementation weaknesses that can be exploited by someone getting ho…