A journal of blank pages that you keep under lock and key when you’re not actively using it.
This approach has a lot of security potential, but it’s not very practical for most people. It wouldn’t work for me.
I use an attack-resistant, cross-platform password manager. Either 1Password or LastPass are good choices. Use it to its full potential.
For example, let the password manager create a unique, long, complex password for every website where you have an account.
And, change your passwords when the password manager tells you your account may have been compromised.
Also, use it for estate planning by allowing your Significant Other to have access to your passwords if you become incapacitated.
Finally, LastPass will let you share a logon without revealing the password.
Check out these other blog posts about password managers for more helpful information.