Forgot to mention, I have an iphone

iPhone model? What do you use for initial security access?

I prefer the Face recognition or Fingerprint on older versions.

iPhone will manage all passwords for free.

Here's a recent article from the NYTimes about password managers: https://www.nytimes.com/2019/08/27/smarter-living/wirecutter/why-you-need-a-password-manager-yes-you.html. They recommend LastPass Free if you don't want to pay for 1password.

Every time you enter a password you are putting it on the internet. While I do have a multi-page list just in case I should die and someone have to find my records I know my common ones and if need be the list is there as a reminder. I am finding that some sites, one I tried to enter this morning, require a new password every three months or a message to you for verification.

" Every time you enter a password you are putting it on the internet. "

This isn't strictly true. Many sign-ons are encrypted as they travel across the internet. Though those too are accessible by someone who wants to.

And for the ones that don't, so what? People are no more liable to financial ruin with someone getting into their Facebook or email account than if someone steals a checkbook. Does anyone keep that and extra checks in a 2 ton safe at home?

The most sophisticated and brilliant security experts and systems cannot provide absolute 100% security, especially not against state sponsored internet misbehavior. If someone wants to get some part of your personal information, they can. If someone wants to break into your home, they can. It's nothing to spend time worrying about.

My passwords are in a text file on my PC and, about once a month, I attach the file to an email that I email to myself so that I can use the file in other locations if needed. Like on my smartphone or other PCs I use regularly.

I don't worry about it. If anyone wants my email or bank passwords, send me a gift certificate for a nice bottle of wine or a 6 pack of craft beer and I'll send it to you.

Oh, Elmer. You have to dispute almost everything I write.

Even typing a password without hitting enter on any screen is entering that password on the internet. Keystroke monitoring is a real thing.

What was it in my comments that you disagree with?

Your comment seemed like needless (and incorrect) scare-mongering to me, something that some here may be disturbed by.

Let's try a hypothetical - assuming your comment DID highlight a serious risk, what do YOU do to avoid that risk or what are you suggesting should be done by users?

Your iPhone will save your passwords for you and will automatically put them in or suggest them to be confirmed with your thumbprint. I've never needed a password manage with any Apple product I've owned for years.

I hate that my banks make me change my password every 6 months! Well, I don’t hate it, but DH is irritated that he has to ask me for the latest PW’s.

Change your bank instead of changing your password. My main banks and other financial institutions don't ever require periodic changes, though a few non financial sites I use do.

https://www.amazon.ca/s?k=password+book&ref=nb_sb_noss_2

I just use an Excel spreadsheet. I do like Elmer does, and e-mail it to myself occasionally.

And banks and passwords. My bank doesn't make me change my password every six months, but it's a good idea to do that once in awhile.

My DH has a black book and no one but him can read his writing. I use the notes section of my contacts list under a couple of fake names. None of the program or institution names are listed, all of my clients and personal passwords are numbered and the passwords for their data are in a shorthand that only I know. They’re also missing one keystroke that is used in all of my passwords. If my phone is stolen or lost, no one would ever be able figure out what the heck I’m talking about much less match them to any specific program.