|
Synopsis: If you must, maintain a master account file, but no master password file.
At some point in time, your account categories and password schemes are likely to outgrow the reliability of your memory. Having to write down passwords may seem the consequence, but it has the risk that someone gets access to your master password file, and then you are really screwed.
Therefore, if you must externalize this critical body of information, write down your account categories without the passwords, and use some of the other patterns, like password externalization or typing rhythm to remind you of the passwords.
Depending on the severity of having your accounts exposed, you may not want to store the file electronically but only keep a paper copy.
Previous pattern: Password Externalization
Next pattern: Password Lock Box
Contributors: Dirk Riehle
|