A list of passwords written down is a whole lot more secure than a single really simple passwords used on each site. And if you keep the book as secure as your car keys, it's as secure as an average user is going to be.<p>It's more portable that software password managers, though the passwords are likely to be less secure. Then again, I keep ending up having to narrow down what characters I can and cannot use in a password after generating them, so you can't make as much use of that as you'd want. A lot of user will still just use '1234' everywhere, but for most users it might actually be pretty good.<p>On top of that, having a list of accounts makes it easier to cross reference them when you see a news report about a site's password database being leaked.