How to share passwords and temporary access safely

Passwords are often sent in messengers and emails where they remain in history, backups, and search. For temporary access, use a one-time note and rotate the password after the task is complete.

Separate the link and the password

If the note uses a manual password, do not send the link and password in the same message. For example, send the link in a work chat and share the password through another channel.

Limit the lifetime

For short tasks, choose destruction after reading or a one-hour lifetime. For contractors or testers, create a temporary password and plan when it will be disabled.

Avoid sharing permanent keys

If a service supports temporary tokens or limited permissions, use them instead of a primary password. The fewer permissions a shared secret has, the lower the damage from an accidental leak.