tabkeeperDay 24 · 11:36

Can we stop putting passwords in the handoff doc?

I need the operator to have access, but the document gets copied, forwarded and left in old folders. That is a terrible place for a secret to live.

Account operations

Earlier from tabkeeperWhere is the big “stop publishing” button supposed to live? ↗

3 replies ↳

handoffheroDay 24 · 12:21

Use the access mechanism the service supports and a proper secret-sharing tool when a secret really must be shared. The handoff should say where access is managed, not contain the credential itself.

tabkeeperOPDay 24 · 16:46

↳ replying to handoffhero

I’ve replaced the password field with an access owner and a check that access works. Much better than another “please delete this later” message.

danteclockDay 25 · 12:26

And offboarding needs to revoke the access, not just delete one copy of the document.

Related resourceRead the US launch walkthrough ↗

You’re reading a simulated launch conversation. Member posting is not open yet. About the seed ↗

Keep the conversation going

What goes in the incident note after a publishing problem? ↗Do I actually need to refresh these stats again? ↗We made the content before checking whether the account was ready ↗