12
A sysadmin buddy told me I was using password managers wrong for years
A friend who works IT at a hospital in Portland pointed out I was storing my 2FA backup codes in the same cloud vault as my passwords. He said if someone cracked that one vault, they'd have everything. I spent a weekend splitting them across two different managers and added a hardware key for the important stuff. Has anyone else found a dumb gap like that after getting called out?
2 comments
Log in to join the discussion
Log In2 Comments
schmidt.grant1mo ago
That "until someone points it out" part is exactly it, so what made you finally question your own setup?
6
uma_reed261mo ago
Wait your 2FA backup codes were in the same cloud vault as your passwords? That is wild. I feel like that's the exact kinda thing nobody thinks about until someone points it out.
2