This has been my system for a while now: - For each new account, generate a long, random but pronounceable password using apg [1]. - Don't let it touch disk.

This has been my system for a while now: - For each new account, generate a long, random but pronounceable password using apg [1]. - Don't let it touch disk. Immediately save it to a gpg-encrypted password file. I use gnupg.vim. [2] - After a few logins the pronounceable password usually sticks. If I can't remember though: gpg -d passwords.gpg | grep example.com The downside: there's no mobile version. That's okay -- I'm not sure I trust my phone with the keys to my kingdom anyway. I also wouldn't trust closed-source software with the keys to my kingdom, or even immature open-source software, for that matter. YMMV depending on paranoia level / threat model. [1] http://linux.die.net/man/1/apg http://linux.die.net/man/1/apg [2] http://www.vim.org/scripts/script.php?script_id=661 http://www.vim.org/scripts/script.php?script_id=661