In the past I have seen having a Google drive document and have FTP username/passwords there.
Is storing passwords in Google drive a good practice?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
Is Google Drive safe?
I wouldn't say that Google drive is not a safe place to store sensitive information. But I bet you cannot rely on it. When it comes to protecting your sensitive data/privacy, it is always good to be sure, and just trusting drive is not being "sure".
One word, Encryption.
Encrypt your data before you store them in the Google drive. Now you don't have to depend on Google to protect your data security, it is you who should keep your mouth shut about your key ;)
Encryption is not always needed when storing normal data which falls under the general category(something like the things you share in the social networks,etc.)
But it is really a great option when it comes to storing your confidential information in drive and in my experience, I am pretty sure that passwords fall under this category.
Quick answer: NO.
If you ever decide that you will automatically log-in to google drive on your device, anyone with access to your machine has access to your passwords.
If you want to store passwords I think you might be better off using a password manager.
Check this list: http://www.pcmag.com/article2/0,2817,2407168,00.asp
A good rule of thumb is: if you don't want to risk other people seeing it, don't put it online. This especially goes for passwords.
If you have to put it online, encrypt it.
I use a cloud service to store my password manager database. It also means I can access it from multiple devices (laptop, phone, work computer, etc).
Google Drive, like most cloud hosting companies (Dropbox, etc.), have complete access to the plain data. This means that their employees (or law enforcement agents) can access it on a whim.
A more secure solution would be a cloud hosting service that encrypts the data locally (on the user machine), and transfers/stores only bits of encrypted data. Such solutions include SpiderOak and Tarsnap.
We learned recently that Google actively searches gmail messages for images with hashes matching those of known child pornography images.
I do not say whether this be good or bad, but I do say: nose, camel, tent. That being the case, one must conclude that nothing you trust to another, whether it's Google, or Apple, or Microsoft, or whomever, is safe from routine inspection. This is not a case of search warrants or court orders; this is a case where a private company has decided to conduct routine searches of the data stored on their servers. So, as others have already written, if you have to store information "in the cloud," it must be encrypted.
People have already said that, so why am I wasting electrons? It is to add that the only safe encryption is strong encryption for which you have generated the key yourself. Any encryption scheme in which someone else generates the key is useless!
Assuming you use gmail as well.
Any account that can be reset with a new password sent to your email address is never more secure then you email system.
Google Drive is most likely secured with the same password as your email.
Therefore it is safe to store passwords of accounts that can be reset by email, in my case this is most account apart from banks etc.
When it comes to password security, I heard this tip from a security-minded colleague. When you need to change your password, get a new random password (using a strong password generator, for instance), write the password on a piece of paper, carry the paper around with you until you have memorized the password, then destroy the paper. Or preferably develop the ability to remember the new password immediately so you don't have to make a copy.
It may seem counter-intuitive to write your password on paper, but if you are going to keep a written copy somewhere, does it make sense to put it online where it could potentially be accessed by anyone with an Internet connection and the ability to overcome whatever security you have around it (note the recent history of very large password database hacks in the news), or does it make more sense to keep a copy on your person?
An additional note: use two-factor authentication wherever available.