“wait until they come home, knock them out at the front door, and then beat them with this wrench until they tell us where the passwords are” 🔧

Also every time I read someone using this strategy, I immediately think of ‘but what if the house burns down’. You can guard against network access from your vault by it not being on the network, but that comes with different risks.

Or if you want to get really paranoid, what about a state-level adversary that breaks into your home, records the entries in the password book, leaves with no trace, then uses it to login as you and monitor your activities, while you gleefully think that your online accounts are safe because they are in physical form.

Just something to think about 💭