2 ms·
Weird that it wasn't mention yet, but you should NEVER share passwords between people at work. Employees should have their own user accounts for every service
by watermelon0 6y ago
Weird that it wasn't mention yet, but you should NEVER share passwords between people at work.
Employees should have their own user accounts for every service used, managed by some identity provider.
Anything else is hard to audit, hard to (de-)provision, and it's not secure.
---
This of course doesn't apply for sharing between friends, or with really small businesses, where only a few people share them.
- BurningFrog 6y agoYou do need to share passwords to common accounts.
- mox1 6y agoThis is just not how corporations work, every corporation needs some type of secret sharing. CyberArk is a billion-dollar business. It includes an audit trail.
- Spivak 6y agoI mean you're right but that doesn't describe the reality. * The AWS root account credentials. * Redis * Password protected certs. * The Ansible vault password. * The local admin account on your LDAP/AD server. * IPMI devices that only have a single account.