I would like to know if it is safe to store the 1Password data file on DropBox?
It can be safely assumed that there are a LOT of people already doing it without any negative security side effects, but I would still like some additional confirmation before taking the plunge.
The 1Password people certainly support using Dropbox.
In general, 1Password uses good encryption and Dropbox keeps your files pretty private. So if you have a good master password, you shouldn't have to worry.
However, giving anyone else any sort of access to your entire password cache is always going to be less secure than keeping it to yourself. Whether the benefits outweigh the risks depends on how valuable the information the passwords protect is.
If you have nuclear launch codes in 1Password, DON'T put them on Dropbox. Otherwise, GO AHEAD.
You could use TrueCrypt to add another layer of security, and for some extra peace of mind. Just make sure you have a strong master password that's easy to remember.
I've been following Dropbox's recent security challenges. If you're up for some reading, here are some articles that might help you decide.
Cloudfogger is a file based encryption tool that uses AES and integrates great with Dropbox, Sugarsync and all the other cloud storage providers.
You might want to check out this blog post: 1Password and Dropbox (security tweaks wanted)
Basically the author points out that there is a text file with entry names and web sites that is not encrypted. Depending on what you're securing, this may be information that you don't wish to place onto Dropbox.
As an extreme example, if you used 1Password to store your login credentials to a terrorist web site, this file would contain the web site name. If the NSA was browsing through the contents of your Dropbox, this would raise some red flags.
