I think it was Vitalik who suggested the only safe way to keep a private key was to remember it - suggesting passwords are safest in your head.