3 ms·

I work at a place that uses cyberArk for privileged AD accounts. I have to copy the password from the web UI to login to the system I use every day. If it times

I work at a place that uses cyberArk for privileged AD accounts. I have to copy the password from the web UI to login to the system I use every day. If it times out, I have to refresh, respond to 2FA and copy it again. I see coworkers storing their entire password (1 week expiration) in notepad in the meantime. I was going to store the password in a portable Keepass, but I got blocked from accessing a software download website and was scorned by the proxy block page. Frankly, I think the cyberArk method is effing foolish and having regular 2fa integrated into a product's login makes a lot more sense.

fullspectrumdev 3y ago
> I see coworkers storing their entire password (1 week expiration) in notepad in the meantime. There’s nothing inherently wrong with this tbh, from a practical (not policy) security standpoint. If I have code execution on your box and can access your notepad, I can also simply monitor the clipboard for when you copy the creds from cyberark.
- unethical_ban 3y ago
  Meh. It's a bad habit. And half the time (generally,, not here) people store docs in shared drives. Secure, accessible password storage shouldn't be a burden.