SecretPaste vs Sharing passwords in Slack
The thing most people actually do.
Sharing passwords in Slack
- Plaintext in a channel or a DM
- Searchable forever by anyone in the workspace
- Exported in compliance dumps
- No way to know who read it
SecretPaste
- A link that destroys itself
- Nothing readable left behind
- A receipt saying when it was opened
- Works from Slack, because it is just a link
What they do well
Slack is not trying to be a secret manager. The failure is not Slack's; it is that a password pasted anywhere durable stays there.