Zip it up with bogus name followed by Bcrypt or in a Truecrypt/VeraCrypt volume uploaded into Dropbox or whatever. You get benefit of proven solution for critical part, esp Truecrypt since NSA hated it, with easy usability and cost/storage/availability of 3rd party storage.