# Why it is time to get rid of passwords in our infrastructure

DevFeed: [Why it is time to get rid of passwords in our infrastructure](<https://devfeed.tech/articles/why-it-is-time-to-get-rid-of-passwords-in-our-infrastructure-29774.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/no-passwords/>)

Author: sasha@goteleport.com (Alexander Klizhentas)

Published: 2021-11-19T00:00:00Z

Content type: opinion

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>), [Security](<https://devfeed.tech/topics/security.md>), [Environment Variables](<https://devfeed.tech/topics/environment-variables.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>)

Tags: [api-keys](<https://devfeed.tech/tags/api-keys.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [environment-variables](<https://devfeed.tech/tags/environment-variables.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

The article argues that passwords remain widespread in infrastructure, appearing as hardcoded credentials, API keys, tokens, cookies, second factors, environment variables, vault-mounted files, and CI/CD secrets. It explains that passwords can be guessed, intercepted, or stolen, and proposes examining supposedly passwordless alternatives more critically.

## Source excerpt

Passwordless is a phrase generating a lot of buzz in the consumer space. But our infrastructure is full of passwords too and that needs to stop.