I think a blanket "never write down passwords" statement is unhelpful. The important thing is to keep any written passwords somewhere safe.

- I don't demand that users never write down passwords, because I find their fear of forgetting them encourages bad habits -- such as picking weak passwords, or using the same password on multiple systems. What I tell them is to keep the written password *on their person*, such as in their wallet, and change it immediately if they lose the paper it's written on.

- Sometimes the risk is simply not that great. If I write down the password to my home router, I'm not taking a great risk; anyone who finds the password that way already has physical access to the router and can push the reset button.

- Sometimes it's necessary for business continuity reasons. Root passwords have to be written down and locked up somewhere secure...otherwise, how can anyone pick up the pieces if the sysadmin quits or gets hit by a truck?


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/220/25156#25156