Storing passwords on Excel spreadsheet....

Snow-Munki

Snow-Munki

Snow-Munki

Soldato
Joined
18 Oct 2002
Posts
10,078
Location
At home
Hi,

At the moment our IT Team store all our passwords in a passworded Excel spreadsheet.

I'm trying to convince the team we should use something like keepass but been told it is just too 'complicated' Any thing I can fight back with ?

Excel spreadsheet is kepted in a security public folder in Outlook btw. As I know you cna get password crackers for Excel but would the Public folder security stop most people ?

thanks,
 
File gets corupted, lost, moved, deleted, some twonk accedently deletes half the contents.
I could go on but I think you get the point :D
The first thing you learn when you work in DR is always have a backup for your backup.
 
Keepass too complicated for an IT team? Sounds like you're being fobbed off to be honest and your problem is people being set in their ways.
 
theheyes said:
Keepass too complicated for an IT team? Sounds like you're being fobbed off to be honest and your problem is people being set in their ways.
Click to expand...

yeah that's pretty much it.... oh well I'll try to fight my corner and see what happens...

Also though if the **** hits the fan like Exchange is down then at the moment we can't get to our passwords so guess that's a good enough reason alone !
 
Snow-Munki said:
Also though if the **** hits the fan like Exchange is down then at the moment we can't get to our passwords so guess that's a good enough reason alone !
Click to expand...

This is your best argument, having been in an organisation where exactly this happened, of course the suggested solution will just be to have a second copy in a secure share on a different server.

The thing you really need to do is a full risk analysis of the current situation and then a benefits analysis of using a different product. Then you have in black and white the justification rather than having verbal debates about it. If it is something you really feel strongly about and you belive represents a serious security risk then you should log it with the companies security manager giving him enough information to understand the situation and your proposed solution.

My personal opinion, don't bother there are much bigger battles to be won that are worth your time and effort the spreadsheet with passwords in is common as much and as long as it is in a secure location and backed up appropriately then it's no worse than a lot of the other solutions.
 
You must log in or register to reply here.
Back
Top Bottom