I prefer to avoid the word "safest" in this context without a specific threat model. Yours is likely different than mine, as I'd generally regard that method as less safe than a password manager. YMMV