1. This website uses cookies to improve service and provide a tailored user experience. By using this site, you agree to this use. See our Cookie Policy.
    Dismiss Notice

VA creates accounts - how to securely transfer passwords?

Discussion in 'BlackHat Lounge' started by Nato1, Jun 14, 2019.

  1. Nato1

    Nato1 Regular Member

    Joined:
    Nov 2, 2008
    Messages:
    441
    Likes Received:
    136
    Hi guys!
    I can't find a solution to this Problem.
    I want my VA to create a couple of hundreds of user accounts on different websites for me and than transfer these accounts to me, in a way so I don't have to go to all these websites and change my passwords to secure these accounts.

    I looked into LastPass and a couple of other password managing tools, but I can't find anything on the scenario I need it for. I figured other IMer must have run into the same problem but I can't find anything on that topic.
    How are you solving this?
     
  2. alain12

    alain12 Registered Member

    Joined:
    Feb 15, 2019
    Messages:
    95
    Likes Received:
    47
    Just use any end-to-end encrypted communication platform. That includes WhatsApp, Telegram secret chats, etc. Or better yet, have him learn manual GPG or PGP encryption, and learn it yourself, and manually encrypt and decrypt password-containing lists.

    Or, have him sync the passwords to a google account via chrome, and use that same account to access them.
     
  3. Nato1

    Nato1 Regular Member

    Joined:
    Nov 2, 2008
    Messages:
    441
    Likes Received:
    136
    Sorry, I think I missed out some information. My VA is creating these accounts manually. They are affiliate program accounts, so I don't want anybody else to have access to them after they are transfered to me.

    Edit:
    I just reread your answer. Thank you! But I kind of need an out of the box solution, for right now. Is there such a Tool or can LastPass be used for this scenario?
     
    Last edited: Jun 14, 2019
  4. alain12

    alain12 Registered Member

    Joined:
    Feb 15, 2019
    Messages:
    95
    Likes Received:
    47
    So if you also don't trust the VA, you could have him RDP into a Windows VPS, and create them on that VPS, so you have complete control of the PC he's using. But nothing prevents him from saving credentials on pen and paper. If the VA is creating them, he will always have some way of stealing them.
     
    • Thanks Thanks x 1
  5. Nato1

    Nato1 Regular Member

    Joined:
    Nov 2, 2008
    Messages:
    441
    Likes Received:
    136
    I guess than I have to trust her and change the passwords manually when these accounts start generating money :/
    Can't believe there is no simple solution for that with a chrome extension that generates and safes the password without showing it to the VA....
     
  6. AestheticHustler

    AestheticHustler Regular Member

    Joined:
    Jun 7, 2019
    Messages:
    235
    Likes Received:
    69
    Gender:
    Male
    Get her to sign a contract ;)