&gt; PasswordSafe has better looking cryptography, though still not up to where I&#x27;d like it to be as well as a worse UI, worse browser support, etc. And last I checked I think Linux support was sketchy.<p>PasswordSafe is, I think, the current best-of-breed with respect to its crypto.  Like you, I have some concerns with it (notably the use of Twofish rather than AES, and a too-low PBKDF2 default), but it&#x27;s the best you can get without writing your own.<p>It seemed to run ok in WINE last I tried it, and there&#x27;re one or two native Linux programmes which can read &amp; write its files.<p>These days I just use an org-mode file encrypted with gpg: emacs automatically prompts me for my password and decrypts it when I open it up.<p>&gt; So I&#x27;m about to take KeePass, gut the crypto, replace it with simple scrypt and AES-OCB or chacha20-poly1305 and hope I can wind up with something I&#x27;m comfortable using - anyone have a better suggestion?<p>Replace the crypto and data model with a PasswordSafe &#x27;v4&#x27; format: scrypt plus AES-GCM plus chacha20-poly1305.