Password managers check the URL before giving its data. A human being can be fooled into giving it to a fake web site.

TBF, they can be fooled too.

Bitwarden warns against using autofill on load for that very reason, as then simply loading a malicious page might cause it to provide passwords to such a site.

And then, a human when a site doesn't autofill, is more likely to just go "huh, weird" and do it manually.

This isn't even weird.

I think most security experts would recommend that you have your most important passwords written down somewhere, and then hopefully locked up in some safe or deposit box somewhere. You don't need to buy an entire book for it, but some people like to spend money.

If this is for your less important passwords, then for the most part, writing them down is actually better. You won't be as tempted to reuse your banking password for your social media. And some people like writing things down. A password manager is a better solution, but lots of people aren't as good with technology and if they even let the browser remember it, they won't know how to retrieve it later if they want to use a different computer, for example.

This isn't even weird.

I think most security experts would recommend that you have your most important passwords written down somewhere, and then hopefully locked up in some safe or deposit box somewhere. You don't need to buy an entire book for it, but some people like to spend money.

If this is for your less important passwords, then for the most part, writing them down is actually better. You won't be as tempted to reuse your banking password for your social media. And some people like writing things down. A password manager is a better solution, but lots of people aren't as good with technology and if they even let the browser remember it, they won't know how to retrieve it later if they want to use a different computer, for example.

Here's the thing .. as crazy as a notebook with passwords sounds, it's not accessible to someone across the internet.

Best option for non techies at home.

I've not found anything better. Storing on my computer, or worse someone else's computer, doesn't seem safe.

I have a letter in my safe in the event of my death that contains all my passwords and accounts. I have also slipped in a dead man switch that she's unaware of that will wipe out my "collection of science".

Best option for non techies at home.

I've not found anything better. Storing on my computer, or worse someone else's computer, doesn't seem safe.

My password-manager is a script that gpg-decrypts to XDG_RUNTIME_DIR and then opens it in editor, encrypts back on changes. Is that bad?

My ex kept her's in an unprotected excel file. I never peeked, I was just surprised when I saw her accessing it on her laptop.

It's pretty safe. Competent password managers will be heavily encrypted. Having your passwords hacked is essentially unheard of. You don't have to worry about it being on someone else's computer as without your master password the password file is useless.

I think the biggest case was LastPass, and they did it by getting a keylogger onto a developers PC to get at their password, but afaik customer passwords were safe unless your master password was weak or reused from a breached one.

But, a notebook isn't hackable at all. But then the people around you could potentially get into it, which is a far more likely threat for a ton of people.

Either way use 2FA at every site that will allow it.

Honestly, a physical password book isn't a bad idea.

Not accessible via the internet, and in most cases if someone has physical access to your system you're done for anyway.

The main weakness it has is from a nosey flatmate, spouse, or child in the house.

Here's the thing .. as crazy as a notebook with passwords sounds, it's not accessible to someone across the internet.