In a company, it is sometimes necessary to send a password securely to share access to an online account.
You use countless applications, devices and other online tools, such as social networks, with so many passwords and identifiers to share with your employees.
Passwords can often be forgotten, expired or compromised. You must therefore reset them and return to your employees. Only, you know, passwords should not be clear in a non-security environment.
What is the best way to send passwords to your employees without compromising security? This is what we will discover in this article.
Separate the password identifier
The first strategy, when you share identifiers sensitive to your teams, is not to send everything to the same place.
Sending the identifier and password by the same channel is to make sure that someone ill -intention can easily use it.
Favor the fact of separating the sending from the sending of the password. Transmit the identifier in a long way for example and the password by your professional messaging. So you reduce the risks.
1. Share a password in a long -voice
We start with a good sense measurement: when the recipient of the password is only a few meters from you, the best is to move to give it orally. It is much more secure than using a Internal company chat or by sending an email.
Does your employee not work on site? You can call it by phone, if the safety level of mobile or fixed devices is satisfactory, or whether it is login / password not too sensitive to platforms themselves already very secure (such as accounts on social networks).
2. Send a password by post
If time does not play against you, postal shipment can also be considered. This solution, among the least used, is however a very secure solution. Only today, we must get the elements as we ask for them …
Obviously, out of the question to share the identifying couple / password at once. If it is a very sensitive access, you can send a 2 -stroke (login and separate password), by registered mail, and even if possible with two different addresses. The recipient can destroy the documents once used.
3. Transfer a password by SMS
If the recipient has an urgent need for his access, it is possible to transmit to him by SMS but there too, you must take some precautions. As with mail, it is wise to proceed in 2 stages and to two different numbers.
First, the connection identifier can be sent to the recipient's manager, for example, or to his personal number. The second SMS, containing the password, will be sent to his professional phone number.
In this way, if one of the two phones is hacked, spied on or even stolen, the pirate will only have half of the access: this will not be very useful and you will have time to react by changing the password again, in the event of a alert.
As the probability that a malicious person takes control of the two phones concerned is negligible, the risk is clearly limited.
4. Send identifiers by email
Of course, there is no question of sending sensitive data, such as a login and a password, via an unacysed email. However, it is quite simple to communicate passwords through encrypted emails.
To encrypt your emails, you can use a multitude of open source software. These tools require a little installation and initial configuration, but it is worth it if you have to send many emails of a sensitive nature. You can turn to a tool like Enigmail.
Read too :: Security: 5 software to encrypt your emails
5. Use a secure password sending tools
None of the solutions listed so far find thanks to your eyes? There is one last solution: use one of the many specialized services, accessible online.
You can use these services to send a message that will be self -destroyed once the recipient will have visualized it, or has passed a delay that you have fixed.
To make sure you use this method safely, be sure to send the password alone, without information on the password function. You can send an email to your recipient to let him know that you will send him the username and password of a specific service, then send him the information through one of the services listed below.
Send passwords with 1ty.me
1ty.me does not require account creation. Just enter the information in the text box and click on “generate a link”.
Copy the link and send it to your correspondent. Once the link is visited, it is destroyed and can no longer be revised.
Share identifiers with Noteshred
Noteshred is free but requires the opening of an account. Once your account has been created, you can send a note directly from the interface.
Noteshred also shows your activity: you can see if a note has been received and read, or if it has been shredded.
Send secure data with Quick Forget
Quick Forget Allows you to define a “secret” to consult a number of times, then to forget it after a number of hours you determine.
As with other services, you will have a link to send to your recipient, and if the secret has been consulted the number of times planned, or if the time has expired, the secret has disappeared.
Read too :: 9 development environments (IDE) PHP to know
Secure your passwords regularly
Finally, remember to change your passwords regularly. Never use the same password twice to limit the risks in the event of a leakage of one of your digital keys.
When an employee leaves your service or the company, remember to change the passwords that were shared with the latter. Confidence does not prevent playing the security card. An employee who left in a negative context can take advantage of access to harm the company. Make sure your rear.
Check the level of security of your business
In order to ensure the safety of your business accounts, remember to respect good practices to secure your passwords. We also recommend the use of a password manager to avoidforget your passwords Or worse, to enter the same everywhere!
Implementing such a solution in your business will also limit passwords between employees. Do not hesitate to Add the double authentication on your professional accounts.
Do your corporate tools seem not very secure? Experts can diagnose your networks and software and strengthen their security. Post your project on Coder.com To receive quotes.