logoalt Hacker News

willmaddentoday at 5:13 PM4 repliesview on HN

You put your passwords in Google Sheets? The data there is not encrypted at rest. Google has 191k employees in countries like China, India, and Pakistan who could potentially access your records. Make sure you use something that encrypts your data at rest, preferably on a device you own and control.


Replies

argeetoday at 6:19 PM

I put my passwords in Google Sheets temporarily. Then I moved them to 1Password, except the throwaway stuff.

Google accounts aren’t immune to being compromised, so I agree that it’s not a good home for passwords (without even the need to invoke internal threats) — but it felt safer than LastPass. Which ought to be an embarrassment.

show 1 reply
smu3ltoday at 7:37 PM

Why those countries? Does google have weaker internal security for employees in those countries?

civet_javatoday at 6:11 PM

I had exactly this happen to me, suffered great monetary losses and had my identity stolen. I've learnt my lesson and have moved on to 1password.

At the end of it I couldn't help but reflect on my foolishness. I realised just how much better I would've felt if only it had been an American, Canadian, or European Googler who stole my data. It really is the worst when malicious entities are Chinese, Indian, or Pakistani. Just the worst!!! (/s)

show 1 reply