4 ms·
Never use Google anything for --including login-- for anything important. The company continues to cause damage to people and businesses through their customer
by robomartin 4y ago
Never use Google anything for --including login-- for anything important. The company continues to cause damage to people and businesses through their customer-no-service stance regarding accounts, their suspension or cancellation. I know people who's small businesses suffered a great deal of damage because of this. Talk about a need for a congressional hearing!
Besides, single sign-on is a security disaster. In an ideal world every single login you have should have a different user ID and password. I do my best to approach this. Of course, you have to rely on password management software to be able to do this.
There is no such thing as absolute security. However, making every login ID and pwd different goes a long way towards ensuring you don't experience a chain reaction of breaches because someone hacked into one account.
Yes, the password manager could be considered to be the weak point then. Encryption and a long and secure password are the keys there. And, if you can, one that is accessible online.
- robomartin 4y agoCorrection: is not accessible online
- ams92 4y agoCouldn't disagree more. Password managers have the same single point of failure that an SSO would. The only difference is that you can't automate onboarding/offboarding of an employee's SaAS applications.