0

What are the alternatives of storing tokens when password managers are discouraged?

Some of the ideas that come to my mind are storing in a text file and encrypting with GnuPG but that's asks for extra password.

Edit Security team discourages the usage of the password manager. In the context of a company policy. I agree the question is vague but that's the limited information I can offer.

4
  • 1
    Can you give us some context for this question?
    – vidarlo
    Commented Aug 12, 2022 at 7:41
  • 4
    Who discourages SSO and/or password managers? In what context and with what justification?
    – Philipp
    Commented Aug 12, 2022 at 8:03
  • 1
    "storing in a text file and encrypting": that's a password manager.
    – ThoriumBR
    Commented Aug 12, 2022 at 9:40
  • "Discouraged" does not mean "prohibited". If you're going to store passwords, there is no safer digital solution than a proper password manager. SSO is a server-side decision. If it's deemed insecure, 2FA can help, as can skipping SSO for more sensitive portals.
    – Adam Katz
    Commented Aug 12, 2022 at 14:16

1 Answer 1

3

What are the alternatives of storing tokens when password managers are discouraged?

Use a password manager. Ignore the advice.

Some of the ideas that come to my mind are storing in a text file and encrypting with GnuPG but that's asks for extra password.

That's effectively a very crude password manager that risks leaving clear text files behind.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .