Should I Write Down My Passwords?

Should I Write Down My Passwords?

As a Cyber Protect Officer, I am often asked: “Should I write down my passwords?”

Here is my advice:

Password managers

The National Cyber Security Centre (NCSC) recommends using a password manager to securely store your passwords. Password managers allow you to create strong, unique passwords for each of your online accounts without having to remember them all. They can also help protect against phishing and often work across multiple devices. 

What about saving passwords in my browser? 

Modern web browsers such as Microsoft Edge, Google Chrome and Apple Safari also include built-in password managers. The NCSC advises that it is safe to use these features on your own devices, making them a simple and effective option for many users.  Note - Please make sure your devices are secured, generally by way of a PIN, fingerprint or facial recognition. 

But what about writing them down? 

However, not everyone wishes to save their passwords in their browser, nor use a password manager. If you are not confident using those methods and find it difficult to remember multiple passwords, keeping a written record can be a good practical alternative, provided it is stored securely. A password list kept safely at home is generally preferable to reusing the same password across multiple accounts, which could allow criminals to gain access to several accounts if just one password is compromised. 

In case of an emergency!

It is also sensible to consider what would happen to your online accounts if you became seriously ill or passed away. Keeping a secure record of important accounts and access information, and ensuring that a trusted family member or executor knows how to locate it if required, can help your loved ones manage your digital affairs. If you use a password manager, consider one that offers an emergency access, trusted contact or family recovery feature. These can help trusted individuals gain access when necessary without requiring you to share passwords during your lifetime. Avoid sharing passwords widely and generally do not include them in your will. A will may become accessible during the probate process, making it an unsuitable place for sensitive information.

Key Takeaways

In summary: The most important thing is to use strong, unique passwords for your online accounts. Whether you choose a dedicated password manager, your browser's built-in password manager, or a securely stored written record, choose a method that is both secure and practical for your particular circumstances.

Please feel free to share this advice with friends, family, and colleagues.