The best practice is that the device private key should never leave the device. One device, one key. A device is lost or compromised? Remove that device's key from your list.
I also use ConnectBot and importing a private key generated elsewhere never worked for me, so I generate directly in ConnectBot itself and add its public key to my server, which is what I should do anyway.