Password Lists? whats the best way.

[The_KiD]

Right at work I have recently enforced a policy whereby we have different passwords for different items.

Until recently we merely used the domain admin password for everything.

I know this wasnt wise, but it was easy.

So I now have lots of different passwords:

Domain admin
Citrix admin
virus Server admin
mail server admin
workstation local admin
Server local admin
etc
etc

All is well and good and I dont have a problem with remembering the passwords, however other staff may need access to these passwords at some point. If I were to leave the company then my successor would need the passwords to get stuff done.

So my question is this, what is the best way to keep a secure password list?

I originally was going to keep it in a passworded excel spreadsheet, however that then means we still have 1 master password (for the sheet) and then anyone who managed to get in the sheet would have complete access to the network.

 

[The_KiD]

I think possibly having them stored in hard copies in safes would be the best way.

Dont like the idea of storing it on a server even if it is NTFS permission protected.

All some nasty virus has to do is to capture someone's password and bingo they have access to the password list :S