If all of my 2FA code generators had been in 1Password I would have been truly screwed, but in a stroke of luck I had been paranoid enough to use a separate app for 2FA codes.
The lesson here is using granular permissions and sharing things selectively, more importantly never giving master access to anyone.
I know this happens sometimes, and I’m thankful my partnerships have never gone this bad. Did you know it was headed this direction before he tried it? Was that the end of the company?
I “won” in the end — the board fired him and appointed me CEO - but it destroyed the company.
And yes, I saw it coming, but was hoping I could control him until we found revenue and the pressure came off. This was illogical because people like that cannot find revenue.
I know this doesn't necessarily apply to smaller companies and startups, but have lawyers write you strong contracts that aren't one-sided, but are full of protections for both sides, if they aren't sabotaging stuff.
If you’re on a small team (~5 people) the person obsessed with access controls cannot be trusted.
If any journalists are lurking in this discussion, this would make a decent article.