Browser-saved passwords are not a business control
Chrome, Edge, and Apple Passwords are useful autofill stores, but they are not a shared business vault for payroll, banking, or infrastructure logins.
#identity
11 articles
1Password is (probably) the best password manager for home and work
An operator’s opinion: why 1Password is my default for personal use and small businesses, including the isolated Families account that comes with Business and MSP-provisioned seats.
Windows Hello for Business vs the passkeys path
How SMBs should use Windows Hello for Business, device-bound passkeys, and synced passkeys without creating three half-finished passwordless projects.
Shared admin secrets in a team vault
How small IT teams store shared admin passwords and API keys in a password manager without Spreadsheet-of-Doom habits.
Time to rotate service account passwords
Inventory service identities, replace passwords where possible, and rotate remaining secrets without breaking the workloads that depend on them.
Phishing-resistant MFA for executives first
Why the CEO's mailbox is the first account that deserves FIDO2 or passkeys, not another SMS code.
Offboarding: make the access cut the same day
A practical same-day IT offboarding runbook for identity, sessions, SaaS, devices, shared secrets, and company data without deleting first and asking later.
Entra-only vs hybrid AD for small offices
A practical way for a 20-60 user firm to choose cloud-only identity, hybrid identity, and the right Windows device join without keeping domain controllers by habit.
When to force SSO for business SaaS
Single sign-on is not free to roll out — but neither is password sprawl. How SMBs decide which apps get SSO enforced and which can wait.
Google Workspace security baseline for small teams
A practical Google Workspace baseline for 10-50 users: enforced 2-Step Verification, safer administrators, controlled sharing, OAuth review, devices, and alerts.
Break-glass admin accounts that actually work
How to create and maintain emergency Microsoft 365 admin accounts so you can recover the tenant without leaving a permanent backdoor.