Well, WRT to malware, KeePass can somewhat mitigate generalized threats.  Say, in-memory encryption to protect against memory dumps, using a secure desktop [1] for the master password, and typing obfuscation during auto-type to protect against keyloggers.  Well, keyloggers that aren&#x27;t written with KeePass in mind, at least.  Both of those would give it a modest edge over plain text in an encrypted container.<p>[1] <a href="http:&#x2F;&#x2F;keepass.info&#x2F;help&#x2F;base&#x2F;security.html#secdesktop" rel="nofollow">http:&#x2F;&#x2F;keepass.info&#x2F;help&#x2F;base&#x2F;security.html#secdesktop</a>
This said, both secure desktops and auto-type obfuscation are turned off by default...