It&#x27;s not a bad approach - it lacks integration, it&#x27;s easier for malware to grab, but that&#x27;s about it. Malware can already dump the memory or log the keyboard and mouse to grab what&#x27;d be needed to decrypt your LastPass or KeePass, so in the end those solutions are no better than plain text files inside an encrypted container. The lack of integration, generation and other UI niceties is really the biggest loss I think.