What belongs in a password manager (and what doesn’t)

A password manager works best when it holds the secrets that unlock accounts and systems — not every file your business has ever created.

Put these in

  • Website and app logins
  • Passkeys, where your manager supports them
  • Authenticator / one-time codes, if you store them there
  • Recovery codes
  • Wi-Fi and router passwords
  • Shared business logins
  • Short secure notes tied to an account, like a username hint or account number

Usually leave these out

  • Long documents and contracts — use document storage
  • Full customer databases
  • Photos of IDs unless you have a clear reason and a better secure store
  • Anything you would not want every vault member to see in a shared space

Personal vs shared

Personal banking stays personal. The shop’s Instagram stays shared. Mixing them is how people accidentally invite a contractor into their bank login, or leave the business Instagram behind on someone’s personal phone.

A useful test

Ask: “If this laptop disappeared tonight, would I need this item tomorrow to get back into something important?” If yes, it belongs in a synced vault. If no, it may just be clutter.

Explore how StrideAuth works for individuals.

StrideAuth helps individuals, families, and small teams store, share, and revoke passwords and related credentials in one place.

Create your free vault