As the title says, my company has a policy that all passwords to e.g. our workstations and server logins must be stored in an online safe. I won't say which one but there are some out there you can look at promising the end of password pain. These passwords are then shared with the company's management - I don't know how that bit works, but they can read the passwords too.
Is this really that secure? I was given two reasons why it is by my boss:
- If I forget my password, I can just ask him for my password.
- If I turn evil, they can lock me out.
I don't agree with these. For the first one, surely there must be a better way for most of the things we use like Google Apps - e.g. the admin has a reset button. For the second one I can just change my password anyway and not update the password safe.
So am I right that this is not secure? Or is this the only way?