How to store passwords

[mavhc]

Neither should any other password storage system, typing/decrypting a password on a computer you don't trust is silly. Imagine typing your credit card pin into a random device a shopkeeper hands to you...oh wait.

 

Safest solution is to have your passwords on your phone etc, and transmit them to the computer when required

[CTIDTech]

Or do what we did and use a SSO platform (we chose ClassLink) which removed the need for users to have many passwords at all. One Password for all platforms & supported by MFA for all users inlcuding students. Security was key for us and certainly something to think about and this met the needs for all devices users are utilising whether in school or at home.

[DrCheese]

Or do what we did and use a SSO platform (we chose ClassLink) which removed the need for users to have many passwords at all. One Password for all platforms & supported by MFA for all users inlcuding students. Security was key for us and certainly something to think about and this met the needs for all devices users are utilising whether in school or at home.

 

That only works for systems that support that SSO method & you still need to keep those passwords & MFA tokens safe anyway.

 

I love edutech systems that support 365 sign in, but not everything does & I will never win the battle when it comes to saying we only support systems which do.

[jr_]

Bitwarden!

[CTIDTech]

That only works for systems that support that SSO method & you still need to keep those passwords & MFA tokens safe anyway.

 

I love edutech systems that support 365 sign in, but not everything does & I will never win the battle when it comes to saying we only support systems which do.

 

I agree, but the system we chose supports multiple SSO options so all apps are possible - some are customised and uploaded too, otherwise we ended up with an SSO platform that only works for some apps but not all which in my opnion defeated the objective of a SSO platform. Therefore depending on the app, some of the apps use SAML, oAuth, LTI and OpenID, some use Azure/AD and/or Google, whilst others are password lockers (parents use this feature) - In short we can add any app to the platform and SSO is achieved and all are supported (even for students) with MFA to log into the platform.