what's your favorite password manager?

I keep them in notepad in my online sync program and backed up, so....I feel secured. They are in the cloud twice lol

Even though I use Lastpass, I also update a Notepad doc every month or so (easier for me than Keypass), and keep it encrypted (Glary) in 3-4 different cloud locations....and even then the passwords are incomplete, just enough notation to jog my memory on password scheme(s)
 
A standard human brain is perfectly capable of retaining the half-dozen critical passwords most businesses need, without having to trust a fallible third-party or unproven software package. Even quite a small one can handle the two or three needed for most office jobs.

I'd accept that there's a good case for also writing the critical passwords down on a piece of paper which is placed in a sealed envelope in the company safe, just in case the human brains fail or go missing, but the opening of the envelope should be a last resort and require the changing of all the passwords it contains.

Why complicate things?

Half a dozen? Really? Most of my clients would have 30 plus and if those passwords are to meet difference, complexity and frequency-of-change requirements then they will soon mess up. Considering that about 10% of our helpdesk tickets relate to forgotten, expired or locked out accounts I don't think your clients are typical.
 
frequent changing of passwords in favour of long-lasting high-entropy human-readable passwords instead

I don't disagree with you, I just think a password manager makes things much easier for people.

I'll just leave this here. (Source)

password_strength.png
 
I don't care what memory cue you use, if you're an MSP, there's no way you're keeping all the "critical" or otherwise passwords in your head. I've got 40 some passwords just for myself, at least that many more PER CLIENT. The only way to stuff all that in your head, even using memorable pass phrases is to reuse them. Which means once a password is phished, now you've got to remember all the places you use it...

That's universally bad...
 
I host my own docker on Unraid (Bitwarden). It's double-encrypted and on my local network only.
 
Last edited:
Back
Top