How to Send Passwords Securely (And Why Email is Unsafe)
We have all done it. A colleague needs access to a shared account, so you quickly type the password into Slack or Email and hit send. "I'll delete it later," you promise yourself.
But you don't. And even if you do, it's often too late.
The Problem with Email and Chat
Plain Text Storage
Emails are often stored in plain text on intermediate servers. If any server in the chain is compromised, your password is exposed.
Durable Logs
Chat apps keep history. If your colleague's laptop is stolen three months from now, that Slack DM history is a goldmine for the thief.
The "Reply All" Disaster
It happens more often than you think. You accidentally reply all, sending a sensitive credential to the entire company.
The Solution: One-Time Secret Links
The safest way to share a password is to ensure that the medium of transfer destroys itself.
- Generate a One-Time Link: Use a tool like SnapSend's Password Generator or Text Share to encrypt the password.
- Send the Link: Send the link via email or chat.
- The Link Dies: As soon as your colleague clicks it, the data is displayed and then deleted from the server.
If anyone else (hackers, curious IT admins) tries to click the link later, they get a 404. The secret is gone.
Best Practices for Credential Sharing
- Never share username and password together. Send the username in one channel (e.g., email) and the password link in another (e.g., Slack).
- Use Generated Passwords. Don't reuse your pet's name. Use a strong, random string.
- Verify Identity. If it's a critical password, call the person to verify they are ready to receive the link.
Security doesn't have to be hard. It just needs to be smart.