Lorrie Faith Cranor, director of Carnegie Mellon University’s CyLab Usable Privacy and Security Laboratory, says the old-fashioned way is the best. “People used to go around saying, ‘Don’t write down your passwords.’ Ignore that advice. You should write down your passwords.” Of course, keep that record someplace secure, not out in the open.