So the key is never to keep the private key decrypted, anywhere. And to make it extremely hard to brute-force.

https://en.bitcoin.it/wiki/BIP_0038

You could also split/shard it into pieces where M of N pieces are required to reconstitute the original key.

http://point-at-infinity.org/ssss/