Excel spreadsheet on a highly secure, intranet-only SMB share. Not even joking.
Then again, we're quite paranoid Google already has a lot of our passwords. Sometimes we take photos of IP addresses and passwords and it gets into Google photos because of someone's phone camera settings.