I'm constantly exchanging credentials with my clients for things like database servers, cloud accounts, etc. Neither I nor my clients, have time to implement a sophisticated method for secure transmission.
So far we've been relying on 2 main methods, each with its own risks:
- Slack/Discord/WhatsApp chat: I understand that this method is not ideal, although WhatsApp is end-to-end encrypted. The other I'm not sure. I have the sense that the risk of someone accessing those chats and exploiting those credentials is low
- OneTimeSecret site: the site https://onetimesecret.com is supposed to be secure and the secrets get burned after being read. But I'm not sure how reliable this site is. For all I know they might be storing all my secrets in a public txt file shared on the web
I know both options have their limitations, but I'm having a hard time weighing the risk and deciding which one is best. Also is there a better alternative to these two methods?