The family password notebook is a single point of failure

Somewhere in most households there is a notebook. Bank logins in the back of a diary, a page of PINs in a kitchen drawer, a note on one person's phone titled IMPORTANT with every password the family depends on.

It's easy to see why it exists. Paper is free, it works during a power cut, and everyone in the house understands it. We're not going to sneer at it — paper has real virtues, and one of them, that it survives things servers don't, is built into our own Recovery Kit.

But as the *only* record of your family's credentials, the notebook fails in every direction at once.

Four ways it fails

It's one physical object. A fire, a flood, a burglary, a house move where one box goes missing — any of these takes every account with it. There is no second copy, because copying it always felt like making the problem worse.

Anyone who finds it can read all of it. The notebook has no idea whether it's being opened by your spouse or by whoever broke the kitchen window. It's all-or-nothing by design: the moment it's found, everything in it is compromised together.

It's always slightly wrong. Passwords change; the notebook doesn't hear about it. The entry for the bank ends up two changes out of date, the current password lives in one person's memory, and the notebook quietly becomes a list of hints rather than a record.

Only one person knows the system. Usually the person who started it. They know which crossed-out entry is still live, what "the usual one" means, and that the electricity login is filed under the old provider's name. The notebook works because they're there to interpret it — which is exactly the situation it was supposed to protect against.

What sharing safely actually looks like

The pattern that fixes all four at once has three parts.

A shared vault, encrypted end to end. Both of you can open it from your own devices, so there's no single object to lose, and every change shows up for both of you the moment it's made. End-to-end encryption means the company hosting it can't read the entries — the vault is only as trustworthy as that property. It's what our Credentials Vault is for, but the pattern matters more than the product: any genuinely end-to-end encrypted vault the two of you can open beats the notebook.

Deliberate sharing, not blanket access. Shared bills and the account you both draw on belong in the shared space. Personal email doesn't have to. Item-by-item sharing means "we share the household" without meaning "we share everything".

Paper, demoted to the right job. A vault protects everything with one master secret, and that secret is where paper still belongs: a recovery code, written down, kept where the notebook used to live. One page instead of forty — and unlike the notebook, useless to a stranger without the rest of the setup.

What to do this weekend

This is honestly a one-hour job, most of it with tea.

1. Make the list. Sit down with the notebook (and the phone note, and the diary) and get every account into one list. Twenty minutes.
2. Sort it into three piles. Shared accounts you both need; personal accounts; accounts neither of you has touched in years.
3. Close the dead pile. Every account you abandon is one less thing to protect.
4. Move the shared pile into a vault. As you enter each one, change any password that was weak or reused — you're logging in anyway.
5. Write the recovery code on paper. Both of you should know where it lives. This is the one page that still deserves the drawer.
6. Retire the notebook. Shred it, or strike through every page. A half-retired notebook is worse than either system alone, because nobody knows which record is true.

The goal isn't to become a security household. It's that the day one of you has to handle everything alone, the answer to "how do I get into the electricity account" takes thirty seconds instead of an afternoon of guessing.