I use Google docs.
Some of the documents contain passwords for on-line accounts, some of these are pretty vital.
Is this a safe practice?
And if not, what is a safe way to store passwords?
I don't trust anything like that to "the cloud." I use passphrases for the fact that once you reach like 24 characters (IIRC), even if they're all just lowercase letters, it provides the equivalent to 128-bit security.
It waz the brest of times, it was the wurst of times
There. I am able to remember my own little one-off spellings of words or modify a space here or there and it won't be brute-forced.
For those websites who are in the dark ages of web-security (like limiting a password to 12 characters, no spaces, you must use a weird letter plus a number, blah blah), I use a program on my cellphone which is kinda a pain, but when I'm out and about, I want to try and guard them.
At home, I will hide my passwords in plain sight, so they're not easily guessable, yet totally accessible to me whenever I need them (which is rare).
This was especially important for my router passwords and BIOS passwords that I had to set up due to one of my step kids. I was teaching him a lot about computers -- he loved them and I loved teaching him stuff. Just wanted to make sure that I kept control at all times of the main family boxes. (He had his own to hack on.)
Errr... anyway.... the cloud.
Yeah, I don't know where the data is stored and therefore I have no idea who may have access to it. Nearly everything I do/write whatever, I have no problem if it becomes compromised. But passwords and SSN's and a few other things, I will not store online and I use encrypted email as much as possible.
As an aside, this is the thing that worries me most about the US government moving over towards cloud computing. Yes, it's dynamic and able to respond relatively quickly to data needs, but I just cringe when I think of all that data not stored on US government servers in the US.