A resurgence of interest in physical password books is being observed, particularly in Australia where the national postal service, AusPost, is selling them for AU$4.90 (approximately US$3.51) for a small version and a dollar more for a larger one. These paper-based password vaults, once dismissed by cybersecurity professionals, are now gaining traction as a viable, albeit limited, security tool for personal use.
The shift in perception comes as many individuals struggle with the complexities of modern password managers and the increasing threat of infostealers. While digital password managers offer features like auto-filling credentials, automatic updates for compromised passwords, and strong password generation, physical books are seen as a more secure alternative to reusing weak passwords or storing them in easily accessible cloud documents like Apple Notes or Google Docs.
Advocates suggest that for home use, a physical password book can be more secure against remote cyberattacks than digital alternatives, provided that unique and strong passwords are used for each account. The risk of a physical break-in to steal a password book is considered by some to be less likely than a successful cyberattack exploiting weak or reused online credentials.
However, physical password books have significant drawbacks. They represent a single point of failure; if lost or stolen, all stored account access could be compromised. Unlike digital managers, they cannot store passkeys, which are becoming a new authentication standard. For corporate environments, cybersecurity experts still strongly recommend digital password managers due to the high risk of a physical book falling into the wrong hands, potentially leading to multi-million dollar cyberattacks. Pentesting consultants have demonstrated how physical access, even through methods like dumpster diving for Wi-Fi credentials, can lead to significant data breaches.
Despite these limitations, a poignant benefit of physical password books has emerged: their utility in end-of-life planning. Having passwords recorded on paper can significantly ease the burden on family members trying to access accounts and manage digital affairs after a loved one's passing, preventing the arduous process of account recovery through service providers or legal channels. Social media discussions highlight instances where such physical records, or even coded systems, proved invaluable during difficult times.
The renewed interest in these "safeguards of yesteryear" comes at a time when cybersecurity professionals are focused on advanced threats like phishing and rogue AI agents. While not a replacement for comprehensive digital security, the simple paper password book is finding a niche among those seeking a tangible, accessible method for personal password management, particularly for its perceived resilience against remote digital threats and its practical benefits in estate planning.
