For my own ultra-secure (offline) storage, I use a strong password for a KeepassX DB stored on a LUKS-encrypted USB drive that's only plugged in when needed. Layers are the way to go ;)