Password Manager or Notebook: Which Suits Your Online Banking Logins?
Margaret compares two ways of keeping banking passwords, a password manager and a locked paper notebook, and explains which one she recommends to most adults starting online banking this autumn.
Margaret O'Connell · · 6 minutes to read
The question behind the comparison
Almost every adult who joins our Online Banking Security course asks the same thing in the first week: where am I supposed to keep all these passwords? Advice to use long, unique passwords is easy to give and hard to follow, because nobody can remember a dozen of them. So the real choice is between two storage methods, a password manager application or a paper notebook kept at home.
I teach money management rather than computing, so I look at this the way a household would. What matters is whether the method gets used every day, whether it protects the banking login from the most common problems, and what happens when something goes wrong. Cleverness matters much less than whether you will still be using it six months from now.
Both options are better than the habits I see most often, which are reusing one favourite password or keeping logins in a phone note with no lock. This comparison assumes you have already decided to stop doing that.
Option one: a password manager
A password manager is an application that stores your logins in an encrypted vault and unlocks with a single master password. It can generate long random passwords, fill them in for you and warn you when a site address does not match the one you saved. That last feature is valuable, because a fake login page will not trigger the auto-fill, which is a quiet signal that something is wrong.
The strengths are real. You never need to invent or remember anything except the master password, every login can be different, and the vault goes with you on your phone and your computer. The weaknesses are just as real. If you forget the master password, recovery can be difficult. Setup takes an hour of patience, and some learners feel uneasy trusting one application with everything.
It also asks you to be comfortable with updates, phone settings and a little technical vocabulary. For someone who already uses a smartphone daily, that is manageable. For someone who is still learning where the banking app lives, it can feel like a second course to take first.
- Strong, unique passwords with no memorizing
- Warns you when a login page address looks wrong
- Needs a master password you must never lose
Option two: a paper notebook
A notebook sounds old-fashioned, yet it has a genuine security advantage: nobody can break into it from another country. A thief would have to enter your home. For adults whose main risk is phishing emails and fake websites rather than burglary, that trade can be sensible, and a notebook costs a few dollars.
The method only works if it is done properly. Keep it in a drawer or a locked box, not beside the computer or in a purse. Write the site name and username, and consider leaving the full password out and noting a hint only you would understand. Never photograph the pages, and never write down the answers to your security questions beside the logins.
The weaknesses are practical. You must type long passwords by hand, which tempts people to shorten them. The notebook cannot warn you about a fake page, and it is useless when you are travelling and need a login. A fire, a flood or a misplaced book can also leave you locked out, so a second copy stored elsewhere is worth the effort.
- Cannot be hacked remotely
- Easy to lose, damage or leave in plain sight
- Tempts you to choose shorter passwords
What each one does not fix
Neither method protects you if you hand a password to a scammer. A caller who says they are from your bank and asks you to read out a code is attacking you, not your storage. Whether the password sits in a vault or a notebook makes no difference once you have spoken it aloud, so the habit of never sharing codes matters more than the tool.
Neither one replaces two-step verification either. This is the extra code sent to your phone or generated in an authentication app when you log in. With it switched on, a stolen password alone is not enough to open your account. In class we set this up before we talk about storage, because it protects you whichever method you pick.
Finally, both depend on a trusted device and a sensible routine. Keep your phone and computer updated, lock the screen, and log out of your banking session when you finish on a shared machine.
How I would choose
Ask yourself three plain questions. Do I use a smartphone and a computer every day? Do I regularly log in away from home? Am I comfortable following a short setup guide once? If you answered yes to most of these, a password manager is the better fit, and its warning about fake login pages is worth the learning time.
If you answered no, or if the idea makes you anxious about locking yourself out, start with the notebook. Use it for the banking logins only, choose passwords of at least fifteen characters made of several unrelated words, and keep the book somewhere private. You can move to a manager later without having lost anything.
There is a middle route that suits many of our learners. Keep the manager for the dozens of ordinary accounts, and keep the master password plus the banking login written in the notebook, stored in a safe place at home. It gives you a paper backup and keeps most of the convenience.
My recommendation for the coming weeks
With the autumn routine settling in and many people reviewing their household paperwork, this is a good moment to fix the habit. My recommendation, for most adults in our courses, is a password manager protected by a long master password and two-step verification, with the master password written once and kept in a drawer at home.
If that feels like too much at once, use the notebook method properly and turn on two-step verification at your bank today. A modest system you actually follow beats an excellent one you abandon after two weeks. Whichever you choose, change any reused password first, starting with your email, because email is how most account resets are delivered.
In the Online Banking Security course we practise both methods step by step, including spotting a fake login page and recovering access safely, so you can try each before deciding.
- Turn on two-step verification first
- Replace reused passwords, starting with email
- Test your backup before you need it
A password manager and a paper notebook can both keep your banking logins safe, and the better one is the one you will use without shortcuts. For most people I recommend the manager with two-step verification and a paper backup of the master password. If you are unsure, start with a carefully kept notebook and move later, since good habits matter more than the tool.
Write to us through the contact page about your devices and your worries. We will suggest whether Online Banking Security or another course fits you best.}
Tell us how you bank and we will point you to the right course
ContactSend us a message
Email: hello@corpflowki.com