i would advise against having your passwords anywhere on the internet in any form, regardless of how secure you may think it is. all it takes is for someone to keylog you, or guess your password/recovery question or something. having the PW DB locally makes the task far more arduous if you are just key logged or something less serious. keepass can even launch programs with the password in a launch parameter, steam for example.
LastPass has a screen keyboard and one time passwords to prevent keylogging.
its trivial to beat onscreen keyboards, simply takes a snapshot each time you push the mouse. onetime passwords can be defeated through phishing or directly attacking the website itself.
