Nice, I do a similar thing. As for Keypass, what protection it provides from keyloggers is that the keylogger can only log actual typed keys. Therefore, if you type in your master password, then they will have that, but if it is different from ALL other passwords, it won't do them much good unless they somehow get your keypass files as well. As for screenwatchers, they can only see what is on the screen, but keypass hides that by default (as does most applications and even web pages for the password field). That is why keypass is so effective at defeating these.