I'm wondering if websites will just start assigning you a password that fits their requirements (I should find a "high profile" website with such restrictive rules there's only like 16 passwords available and brute force them all--then publish it.)

I keep it on the computer only, anything that I need on my phone is already there or can wait. There's a version of KeyPass available for Android but when I tried it it wasn't very polished.

That's why I'm skeptical about any cloud thing. You should assume that anything up there is compromised--it might very well be. Couple that with how much time it takes to fix something if the cloud goes wrong, I'd rather have it where it belongs--on my hard drive and not theirs.