Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 1 down vote favorite

Following this discussion about "Online Passwords Managers" I wonder whether it is a good idea to store the passwords using a spreadsheet inside Gmail documents? I mean, it seems to me that these password will be as safe as my Gmail account which I consider to be safe enough. Is my assumption correct, or this way of storing passwords is not recommended?

share|improve this question
The google spreadsheet is not encrypted thus it is stored in plain text. Which means anyone with acces to your Google account can access the file. – Ramhound Jun 18 '12 at 13:04
I typed out all my passwords and then saved as a PDF, stored it in an innocuous named folder on gmail. How safe is that? – Andry Bauer Mar 25 at 23:25

2 Answers

up vote 2 down vote

I have done that before and it is a fairly good solution when you need to share certain password lists with other administrators. Yes, your gmail account can be somewhat safe if you use it correctly. On the other hand, gmail is also a pretty big target, is susceptible to government subpoenas, and you have to be VERY careful that everything that connects to your gmail account uses a trusted SSL connection. It is very easy to take over a gmail account just by sniffing unencrypted traffic.

My preferred solution, other than an online password manager, is to place a password-protected excel spreadsheet on a shared cloud storage folder.

share|improve this answer
up vote 0 down vote

Many of the javascript attacks have come through advertising circulated via google.com. Mitigate that by creating a dedicated firefox profile just for password management blocking all other sites besides docs.google.com.

It is better to encrypt on the client side so what is stored online is not reversible. If google supports a way to encrypt at the client in javascript, then google docs may be ok.

ClipperZ is an open source project that you could host yourself on a private server only accesible via your vpn. Passwords are encrypted in the browser before being sent to the server.

share|improve this answer
In the past, there were many cracking programs to crack an Excel spreadsheet password. Not sure if that has changed much in the last few years. – rjt Jun 17 '12 at 4:54
1  
Password best practices are still important. – Mark Burnett Jun 19 '12 at 22:10

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.