[redthrow]

For example Bruce Schneier recommends writing down the password and keeping it in a relatively safe place like the wallet (where people keep other sensitive information like credit card numbers).

https://www.schneier.com/blog/archives/2005/06/write_down_yo...

I don't think anyone recommends writing down the password on a post-it note and put it on the computer screen at work.

[kurtisc]

Even then, if it's an OS password (drive encryption n/inc) and they have physical access to the disks containing assets then it's already game over.