Back in the days before shared password manager systems were a thing I was asked by an auditor how we shared the passwords for all our servers and services. I

Back in the days before shared password manager systems were a thing I was asked by an auditor how we shared the passwords for all our servers and services. I simply told them that we wrote them down on pieces of paper and locked them in our safe. They replied that all they needed to do then was to break into the safe to get access to our machines. That was when my colleague replied "Sure, you could do that - but you'd be wasting your time as the safe is in the server room, so you'd already have physical access to the servers" If someone can't handle a password manager then writing down a longer more complex password and locking it in drawer is still better than picking a simpler password.