Hacker News new | ask | show | jobs
by suramya_tomar 1914 days ago
This is a good idea for bookmarks to resources etc. However, you should not be sharing passwords in a shared profile because at the end of the day you would want to be able to go back and check which user made a particular change or authorized something or leaked data etc and if everyone uses the same password you can't do that.

A search for why shared passwords are bad gives us a whole lot of other reason why you shouldn't share/have common passwords.

Another problem is that if a user fat fingers and deletes something they will impact everyone that uses that profile. Or if they log in to a personal account at any site (ecommerce/medical/mail) and save the password they are essentially giving access to that account to everyone else who uses that profile

1 comments

The thing is, if there is only 1-3 non-admin persons at a time having access to the chrome profile it is not much of a risk.

Say you have a small purchase department, you can have purchasing@company.com, for customer service cs@company.com, marketing@company.com for marketing.

It allows for faster onboarding. Even if it is just one person using the profile, it is better to make a general company chrome profile for many tasks since other people can take over the Chrome profile if a person leaves the company or changes position.

But yeah, there are some problems with the risk of exposing private passwords++