I think Bruce Schneider recommended that most people should just keep their password in their wallet.