I saw someone's interesting practice to store sensitive information.
He is saving all his thousand logins (including banks and email) in a access-restricted Google spread sheet, stored on his Google drive.
The link to the document is shortened using some URL-shortener and he uses that simple-to-remember link to open the document every time he needs a specific password or an account number.
His argument is that the practice is secure enough because:
The document is on his personal Google drive protected by Google, as for the external attacks. So the location is more secure than e.g. his PC.
The access to document needs google login, which is 2-way secured. P.S. (I mean 2-step verification of google)
The URL to that document is not known to anyone else except himself, his browser, and the shortener service, all of whom cannot access the document without login details. Rest of the world doesn't know the location/URL.
He opens the document only on his PC, laptop, and mobile.
The information in such a document is everything that someone needs to impersonate him and I don't think this method is so foolproof.
Can some one justify technically, how secure this practice is? Can you suggest an alternative as easy as typing a URL everytime he needs to recall a password?
While both seem to be cost-free, first is preferable to me for being open-source -- I am going to give it a try.
Mentioning efficient alternatives (esp. as easy as a short-URL above) like this will be the most important take-away from this post. For me, in spite of having heard about password managers many times, I never really focused on them.