Using Google Chrome profiles as password manager for business (easy onboarding)

2 points by gregjotau 5 years ago | 2 comments

With Gsuite you can make a lot of accounts without licenses. You can make a Google chrome profile with these accounts.

you can store passwords and bookmarks related to marketing for instance and do this for every domain in the business.

This can make onboarding easier as people can just log into the Chrome profile and have all the access they need for the specific job: Bookmarks, credential access etc.

suramya_tomar 5 years ago |

This is a good idea for bookmarks to resources etc. However, you should not be sharing passwords in a shared profile because at the end of the day you would want to be able to go back and check which user made a particular change or authorized something or leaked data etc and if everyone uses the same password you can't do that.

A search for why shared passwords are bad gives us a whole lot of other reason why you shouldn't share/have common passwords.

Another problem is that if a user fat fingers and deletes something they will impact everyone that uses that profile. Or if they log in to a personal account at any site (ecommerce/medical/mail) and save the password they are essentially giving access to that account to everyone else who uses that profile

gregjotau 5 years ago | |

The thing is, if there is only 1-3 non-admin persons at a time having access to the chrome profile it is not much of a risk.

Say you have a small purchase department, you can have purchasing@company.com, for customer service cs@company.com, marketing@company.com for marketing.

It allows for faster onboarding. Even if it is just one person using the profile, it is better to make a general company chrome profile for many tasks since other people can take over the Chrome profile if a person leaves the company or changes position.

But yeah, there are some problems with the risk of exposing private passwords++