0

What are the alternatives of storing tokens when password managers are discouraged?

Some of the ideas that come to my mind are storing in a text file and encrypting with GnuPG but that's asks for extra password.

Edit Security team discourages the usage of the password manager. In the context of a company policy. I agree the question is vague but that's the limited information I can offer.

Improve this question
4
  • 1
    Can you give us some context for this question?
    – vidarlo
    Aug 12, 2022 at 7:41
  • 4
    Who discourages SSO and/or password managers? In what context and with what justification?
    – Philipp
    Aug 12, 2022 at 8:03
  • 1
    "storing in a text file and encrypting": that's a password manager.
    – ThoriumBR
    Aug 12, 2022 at 9:40
  • "Discouraged" does not mean "prohibited". If you're going to store passwords, there is no safer digital solution than a proper password manager. SSO is a server-side decision. If it's deemed insecure, 2FA can help, as can skipping SSO for more sensitive portals.
    – Adam Katz
    Aug 12, 2022 at 14:16

1 Answer 1

Reset to default
3

What are the alternatives of storing tokens when password managers are discouraged?

Use a password manager. Ignore the advice.

Some of the ideas that come to my mind are storing in a text file and encrypting with GnuPG but that's asks for extra password.

That's effectively a very crude password manager that risks leaving clear text files behind.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .