If the person you describe really is doing that for all their passwords, then they are correct. Their password store is more secure than a password manager by nearly every metric that counts.
replyThe one thing I would ding that approach on is recoverability, though. If a fire burns that down, it's gone.
deleted
replyThey should buy a Yubikey (a physical key) and keep their passkeys resident on that. Then they can truly keep that physical key locked up in their safe. And it is truly safer than their physical notebook because they are safe from being tricked into entering their password in the wrong place.
replyHow do they tell their significant other how to logon to a shared account when they aren’t together? How do they use the Yubikey with their phone, laptop and tablet conveniently?
replyI mean, they're right. I wouldn't trust any online password manager even if it was iCloud.
reply