Where passwords live.
WHERE TO STORE THEM
A password manager.
WHERE NOT TO
A note on your phone A document called "passwords" A browser on a shared computer Written on paper near the computer In your email
THE EMAIL POINT
Passwords sent by email remain in both mailboxes indefinitely.
A compromised mailbox exposes them all.
HOW TO SHARE A CREDENTIAL
Through a password manager's sharing feature Or by a separate channel, changed immediately afterwards
WHAT NOT TO DO
Send passwords by message or email Share them in a group chat Write them in a shared document
FOR CONTRACTORS
Create an account for them rather than sharing yours.
Then no credential needs sharing at all.
IF YOU MUST SEND ONE
Send the username and password by different channels Change it once they have access
WHAT TO DO ABOUT CREDENTIALS ALREADY SHARED BY EMAIL
Change them.
They are in an unknown number of mailboxes.
