Where/how do you store all your passwords securely?

Printable View

08-21-2003, 06:55 AM
JMac

Where/how do you store all your passwords securely?

I'm sure there's plenty of you out there who maintain multiple databases and various user accounts (incl. SYS, SYSTEM etc) within each DB.

I'd like to canvas opinions/preferences about how you go about noting down and securely storing these passwords: in a notebook? some software? post-it notes around your workstation ... ;)

What do you find works best?

I have a notebook with passwords in. When they change I cross the old ones out and write in the new ones. It looks a bit of a mess actually. When I change any password I photocopy the pages from the book, put them in a sealed envelope and put them in the safe.
08-21-2003, 07:02 AM
oddster

Sounds ok to me as long as no scallywags have access to your safe!

You could use an MS Excel sheet, it might be more organised and you can password protect and encrypt it, then store it in a safe place (restricted network drive for example) if there is such a place.

But are you sure you trust yourself???......

LOL

:D

Brgds,

Andy
08-21-2003, 10:43 AM
abhaysk

Why dont you just store in a table of schema X and only you have access?:D
08-21-2003, 10:52 AM
thomasp

Just out of curiosity, why would you want to write down these passwords in the first place??
08-21-2003, 11:35 AM
abhaysk

Quote:

Originally posted by thomasp
Just out of curiosity, why would you want to write down these passwords in the first place??

Lemme guess, ...hmm how abt being a DB admin for abt 50 DBs...and each DB having around 20 schema's..:D

But still wondering, if noting pswd is required :rolleyes: :rolleyes:
08-21-2003, 01:17 PM
TomazZ

how about having one own username with one password on all 50 DB's ?
08-21-2003, 04:24 PM
jodie

How about having a Mgr that access the databases once in a blue moon and can't remember the passwords? We use an Excel Spreadsheet...
that I print out for the boss whenever anything changes :o

It's not too secure, but it works for us.
08-21-2003, 04:41 PM
stecal

How about this: Create a database using SQL Server, and store the passwords in that database. That way, none of the Oracle users would ever think to look anywhere else.
08-21-2003, 08:53 PM
SANJAY_G

Quote:

Originally posted by stecal
That way, none of the Oracle users would ever think to look anywhere else.

LOL. :) Specially, they would be too lazy to go into MS SQL (Messy-sequel).

For unix users: vi the file with -x option, and supply a key. You can see the file only if you know the key.

HTH
08-22-2003, 02:45 AM
DaPi

Re: Where/how do you store all your passwords securely?

Quote:

Originally posted by JMac
When I change any password I photocopy the pages from the book, put them in a sealed envelope and put them in the safe.

Since you should allow for your own unexpected demise (under a bus is the usual scenario) this is probably the best answer. I would suggest the CEO/CIO's safe as a deterent against non-urgent access.
08-22-2003, 04:53 AM
TimHall

Why not use Enterprise Manager and store the SYS password as a preferred credential. That way you only need to remember the password to Enterprise Manager and the rest is sorted for you.

Alternatively, use a standard pattern in the password but prefix/suffix it with the SID/Database Name. That way all the passwords are different, but easy to remember.

Obviously, if someone founds out your pattern they have access to all your machines :(

Alternatively, set them all to "password" no-one will ever thing of that!

Cheers

Tim...
08-22-2003, 05:43 AM
TomazZ

Quote:

Originally posted by TimHall
Alternatively, set them all to "password" no-one will ever thing of that!

:D :D :D
Yes, or the same as username.