Is It Safe to Write Passwords on Paper?
Paper has real security virtues: it cannot be hacked, phished, or hit by ransomware. Its one flaw is that anyone holding it can read it. SecurePaper resolves the dilemma — write your passwords down, but as AES-256 encrypted QR codes that only you can turn back into text.
The problem
Everyone needs a fallback for the day the password manager is unreachable, the phone is dead, or an heir needs the Wi-Fi password. So people improvise:
- The notebook in the drawer. Solid against remote attackers — and wide open to everyone with access to the room: family, guests, cleaners, burglars. And notebooks travel: the same list often ends up in a handbag or wallet.
- The passwords file. A spreadsheet named "passwords.xlsx" on the desktop or in a cloud drive is the first thing malware and attackers look for.
- Memory. Which in practice means a few reused passwords everywhere — one breach unlocks many accounts.
The paper instinct is right; the plaintext execution is what fails. A backup should survive being found.
How it works with SecurePaper
- 1
Start from a template
The Banking details template covers login, password, PINs, and account number. There are also templates for Wi-Fi & home codes and 2FA backup codes, or begin with a blank page and write anything.
- 2
Encrypt in your browser
Everything is encrypted locally with AES-256-GCM via the WebCrypto API — the plaintext never leaves your device. Protect it with a random key or a passphrase; the security page documents both modes and the exact data format.
- 3
Print and file it
The result is a page of QR codes you can print, laminate, and keep with your documents — or hand a copy to family. It reads as noise to everyone without the key.
- 4
Read it back whenever needed
Scan the codes with any phone or webcam and decrypt in the browser — or with the standalone offline decryptor, which works with no internet and no SecurePaper servers at all.
Versus the alternatives
Versus a password manager
Not a contest — use both. The manager handles daily logins better than paper ever will. But the manager itself needs a recovery path that lives outside it: its master password and recovery codes on encrypted paper mean a forgotten master password or a dead device is an inconvenience, not a catastrophe.
Versus the plaintext notebook
Same medium, same cost, same offline resilience — minus the part where a burglar or houseguest reads your bank login. The only extra step is scanning a QR code instead of reading handwriting.
Versus browser-saved passwords
Convenient, and fine for low-stakes accounts — but tied to one browser profile and readable by anyone who can unlock your device. It is a convenience feature, not a backup: it will not help when the device itself is what you lost.
Frequently asked questions
Is writing passwords on paper really a bad idea?
Less than its reputation suggests. Paper cannot be phished, keylogged, or breached remotely, and a written list of strong unique passwords beats reusing one weak password everywhere. The genuine weakness is physical: anyone who finds the paper can read it. Encrypting before printing keeps every advantage of paper and removes that one weakness.
Should this replace my password manager?
No. A password manager is the right tool for everyday logins — autofill, generation, sync. Encrypted paper is the backup layer underneath it: the master password, recovery codes, and the handful of credentials you would need if your devices were lost or the manager were unreachable.
Which passwords belong on paper?
The ones that recover everything else, and the ones you need when devices fail: your password manager's master password, primary email credentials, banking login and PINs, Wi-Fi and router passwords, safe combinations. SecurePaper has ready templates for banking details, Wi-Fi and home codes, and 2FA backup codes.
What if someone finds or steals the printout?
They get ciphertext. The page holds AES-256-GCM encrypted QR codes that are unreadable without your key or passphrase — nothing on the sheet even says which accounts it covers. Physical theft of the paper exposes nothing on its own.
Where is the encryption key kept?
Your choice of three modes. Passphrase mode stores nothing anywhere — the key is derived from a passphrase you remember. Guest mode keeps a random key in your browser's localStorage, with JSON export so you can save a copy. With a free account, keys sync encrypted to the cloud for multi-device access — a documented trade-off explained on the security page.
How do I keep the printout up to date when passwords change?
Re-encrypt and reprint the document, then shred the old sheet. Reserve the paper backup for slow-changing, high-value credentials rather than every login, and an occasional refresh is all it needs.
Make the drawer copy unreadable
Your first encrypted backup takes about five minutes.
Start from the Banking details template — free, no account neededSee the step-by-step guide, the security model, or the longer discussion in are passwords on paper safe?