Hacker News new | ask | show | jobs
by nerdklers 3952 days ago
How would you suggest dealing with shared passwords? I would rather have a much better solution than having a vault in a closed source app (even though it promises encryption) on Dropbox which pretty much have to release information to for example NSA if I'm not mistaken. It's by far the easiest solution I've found but would very much want a more secure and more private solution.
1 comments

The best way to deal with shared passwords is to not have them. If you find yourself needing to share a single account with multiple users, then you're doing something wrong.
This simply is not conducive to a modern team. There are better ways to ensure security while still allowing some ease of use.

Not saying that you should store private keys in not-so-private places, but if you need to access any non-critical accounts as a team, what you propose is simply not reasonable.

What kind of non-critical services would a team need to share an account for?