Browser Vault, Paid Manager, Paper Notebook: Which One Suits Which Household

Picture three households that have each solved the same problem in a different way. In the first, every password lives in the browser and nobody has thought about it in years. In the second, a paid manager sits on four devices and one person in the house resents paying for it. In the third, a notebook in a kitchen drawer holds everything in one handwriting. The argument between these three is usually conducted as though one of them is correct, which it is not. They fail in different directions, and the failure you can absorb depends entirely on who else lives with you.

The Browser Vault You Already Have Switched On

Every major browser now stores passwords, syncs them between your devices, generates strong ones on request, and warns you when something you saved turns up in a known breach. It costs nothing, it is already running, and the autofill is smooth enough that people genuinely use it, which is the single strongest predictor of whether any password system works at all. A method that is slightly worse in theory and actually used beats a method that is better in theory and quietly abandoned in the second week, and that trade decides more of this than any feature list.

It wins cleanly in one situation: one person, one ecosystem, nothing shared. If every device in your life comes from the same manufacturer and nobody else needs a login you hold, the effort of moving is hard to justify. It stops working the moment you need to hand a login to a spouse or an employee, or the moment you use two ecosystems seriously, because cross-platform syncing between a phone from one company and a desktop from another is where these vaults get awkward. Awkward means people start keeping a second list somewhere considerably worse.

The Standalone Manager and the Fee It Has to Justify

A dedicated manager costs a modest annual fee for a family plan, behaves identically on every device, and does three things the browser vault does not. It offers shared folders that two people can use without either knowing the other's master password. It holds secure notes for the things that are not logins, such as an alarm code or an account number. It supports an emergency access arrangement so somebody can get in if you cannot, which is the feature nobody thinks about until the week they need it and it is far too late to set up.

The shared folder alone tends to justify the fee, because the realistic alternative is a text message thread containing the utility login that will sit on two phones forever. It wins in any household with genuinely shared accounts, in any small business, and for anybody who has ever emailed a password to a relative. It stops working in one specific way: everything sits behind a single master password, and if you forget that and lose the printed recovery kit, nobody at the company can help you. That is a deliberate design property rather than a defect, and it means the kit has to live somewhere physical.

The Notebook in a Drawer, Which Deserves Less Sneering

Paper gets dismissed, and it should not be, provided you are honest about the threat you are actually defending against. A notebook cannot be phished, cannot be pulled off a server in another country by somebody who has never met you, and cannot be read by software running on your laptop. Its entire risk surface is people who can physically reach the drawer, which for most households is a short and well understood list. Judged against the attacks that actually happen to ordinary people, that is a narrower exposure than the objection usually assumes.

It wins for an older relative who is never going to adopt a manager, for a small set of accounts that rarely change, and in every household without exception for the recovery codes belonging to whatever system you do use. Recovery codes belong on paper, because they are the thing you need on the day the phone is gone. Paper stops working on volume and change: sixty accounts that rotate is not a notebook problem, and the failure is silent, since people stop updating it and discover months later that half the entries went stale.

How the Three Fail, Which Is the Real Comparison

Cost separates them least, since the browser is free, the manager costs about what a streaming service does and a notebook costs a few dollars, so nobody is really choosing on price. Sharing separates them most: the browser is poor at it, the manager was designed around it, and paper is perfectly adequate provided both people live in the same house. The differences that actually decide it are the realistic failures rather than the dramatic ones. Left alone for two years, a browser vault quietly grows a second list on a sticky note, a manager risks a forgotten master password, and a notebook goes out of date without announcing that it has. Choose the failure you would notice and could recover from.

Moving Between Them Without Losing a Week

Start by picking the ten accounts that matter, which means email first, then anything financial, then anything holding a saved card, since those are the ones worth doing carefully and the rest can migrate whenever they next ask you to log in. Export from the browser rather than retyping, because every manager imports the standard file and doing it by hand is how people abandon the project on a Tuesday evening. Then delete that export, including from the trash, since it is a plain readable list and briefly the most dangerous file on your computer.

Turn off saving in the browser once the manager is working, or you will end up with two half-current copies and no way to tell which one is right. Print the recovery kit and store it with the passport and the birth certificate rather than inside the manager it unlocks, which is the circle that traps people. For one person in one ecosystem with nothing shared, staying put and adding a second factor to email is the better use of an evening. For everybody else the manager earns its fee inside a month, and in all three households the printed sheet in the drawer is what turns a lost phone into an inconvenience rather than a lost weekend.