> With the notebook you have a single password compromised which has the chance of serving as a canary to detect the compromise. This sentence makes no sense.

> With the notebook you have a single password compromised which has the chance of serving as a canary to detect the compromise. This sentence makes no sense. There is no canary with a password compromise. Either the site compromised announces the compromise, or a security researcher finds a new list for sale on the dark web and announces it, or nobody knows about it. The password generation/storage method does not matter. But you definitely will have a huge pain in the ass to figure out alternate passwords for sites when they do get compromised and need to be rotated. Obviously you can't replace this sheet or you'd be resetting all 268 or whatever passwords you currently use. > With a password manager potentially every password is instantly compromised. Sure, but the same is true of this weird password map on paper thing. Any "algorithm" most people could actually use to "decode" passwords on that map can be trivially defeated by an amateur. That's why we stopped using paper ciphers like 150 years ago. > I'm talking about using passwords that eg. are a combination of a notebook part, and a secret only you know, thereby having a unique password for each service Or you could use a password manager, and just have unique passwords and no memorization. > If you have to pay attention to security researches to use a package manager it is already impractical for the wast portion of the population. It's not impractical at all, just use BitWarden or 1Password. This isn't rocket science dude. Just do what security expert tell you to do. (Hint: NONE of them suggest writing passwords down) > Remembering 239 secure passwords, even with a mnemonic is a fulltime job. It's not in any way realistic. So. Use. A. Password. Manager.