Good. Definitely good. But remember your good advice is up against my good advice of writing it under the desk and pretending to drop my pen.

Ha, and the stupid girls in the office thought I was trying to look up their skirts - fools.

Roll-o-dex

If I tell ya, I gotta kill ya.

Actually I have a hidden in plain sight text file. Name it something very similar to what Windows uses for some of the numerous files in a log folder of your choosing in the Windows folder/system/32 in a folder of your choosing. If you are really paranoid, rename it to a .cnf or other file type.

To keep a copy with me on my phone I use an app I love called AirDisk Pro. It makes my iPhone into a wireless USB drive. I can make a zip file of my business files that is 600 MB, and quickly transfer it to my iPhone. I figure if the FBI can't hack an iPhone, and it should be secure. The AirDisk pro is pass key protected or you can use your thumb print. I have tons of archive data in the app, on my phone. I can access it on the phone, or download it to any computer with a WI-FI network.

To backup critical information to my phone is comforting. In event of a house fire, or some natural disaster, I will indeed have my phone with me.

I had a document on my computer with all of my passwords. I got uncomfortable having all the sensitive passwords on the computer so I password protected the document... By now you probably know the ending but yeah... I forgot the password to the password document... then I got locked out of it due to too many attempts... Yeah... don't do that.

make it longer than required
Just because it needs to be 8, that can be hard to remember. But "ThisIsThatSlowSystemForTPSReports! is both easy to remember and well out of the range for practical brute forcing.

Make it longer than required and change it somewhat regularly and I guarantee you will not need to write them down or be the weak link for attackers.

http://forums.pelicanparts.com/uploa...1519410436.jpg

This with a pencil and an eraser works well for me.

To take what "reachme" says a step further - use the first letter of each word in a shortened version of one of your favourite quotes with a numeral or 2 for variation - à la Shakespeare etc. Probably some will feel this is not a great choice - but seems to work for me.

Cheers
JB

The issue is you can't ALWAYS rely on a given system/pattern. Some sites require 8 chars or more, then some an upper alpha and also some a "special" character.

Password protected Excel file on an iCloud drive.

If a hacker can figure out what the file is and what the password to the files is, the hacker is most likely already making my life miserable.