Hacker News Reader

Security policy in my company disables saving of passwords and disallows password managers.

Ah, so they’re all conveniently located on sticky notes attached to monitors?

Honestly, a sticky note on a monitor is more secure than what a lot of people actually do. At least there, physical access is required to obtain your credentials.

But what I do is use an offline password manager on my phone. Yes, I have to actually read and type in the passwords that I don't have memorized, but it's a small inconvenience to get an additional security gain. Plus, it's out of the reach of IT.

> Honestly, a sticky note on a monitor is more secure than what a lot of people actually do.

That's not really saying much. It's still very dumb and insecure.

My friend's father used a notebook for all logins and passwords, he used phrases for most with some exceptions. He started doing this before password managers were a thing in the late 90s. When he died a few years ago, his family had access to everything.

Reply on news.ycombinator.com