<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Like Peter, I generally prefer user authentication via AuthUser to passwords-only. But I know one other tool for reducing password chaos, when passwords are under the admin's control: passwords by reference. </div><div><br></div><div>Instead of putting the end-user password on a page, you put @_site_mypassword on the page, and define that in your config file. This is useful if you need to change passwords on a group of pages at once, but in theory it also should be useful if you need lots of different passwords. For example, if you need each page to have its own unique password, you can create @_site_mypagenamepermissionlevel for each permission, using each page's pagename and the permission you are granting. Then the entire list of passwords are available to be viewed (unless encrypted) in one central location: the config file. And, as always, they can be changed in one place too.</div><div><br></div><div>See <a href="http://www.pmwiki.org/wiki/PmWiki/PasswordsAdmin#settingsitewidepasswords">http://www.pmwiki.org/wiki/PmWiki/PasswordsAdmin#settingsitewidepasswords</a></div><div><br></div><div>Randy</div><br><div><div>On Aug 17, 2010, at 4:32 AM, Mike wrote:</div><blockquote type="cite"><div><font class="Apple-style-span" color="#000000"><br></font>Now, unfortunately, I'm starting to lose the overview. Especially when I want to add a new password to a page, it is confusing that I need to remember all the other passwords I've handed out.<br></div></blockquote></div><br></body></html>