I mean you could just store it encrypted in the database for the basics, and for advanced users allow them to back it up.

There are tons of ways to improve it, but there is definitely way more you can do without much inconvenience to the users. I doubt losing old DMs is a huge issue when you forget your password…