What belongs in a password manager (and what doesn’t)

A password manager works best when it holds the secrets that unlock accounts and systems — not every file your business has ever created.

Put these in

  • Website and app logins
  • Passkeys, where your manager supports them
  • Authenticator / one-time codes, if you store them there
  • Recovery codes
  • Wi-Fi and router passwords
  • Shared business logins
  • Short secure notes tied to an account, like a username hint or account number

Usually leave these out

  • Long documents and contracts — use document storage
  • Full customer databases
  • Photos of IDs unless you have a clear reason and a better secure store
  • Anything you would not want every vault member to see in a shared space

Personal vs shared

Personal banking stays personal. The shop’s Instagram stays shared. Mixing them is how people accidentally invite a contractor into their bank login, or leave the business Instagram behind on someone’s personal phone.

A useful test

Ask: “If this laptop disappeared tonight, would I need this item tomorrow to get back into something important?” If yes, it belongs in a synced vault. If no, it may just be clutter.

Explore how StrideAuth works for individuals.

StrideAuth is a password manager for individuals, families, and small teams. Store, share, and revoke passwords and other credentials in one place.

Create your free vault