I use hard copy and do not carry them with me- For most non critical site I use a simple algorithm to get the password on the fly. For sites that support openid, I use 2 factor auth enabled two factor I have created-.