Why are generic accounts bad?
Generic accounts can obliterate that capability. Bad password habits (sticky notes under the keyboard) are common enough. Sharing accounts means sharing passwords – and that will inevitably bring similar challenges. Ultimately passwords may well fall into the wrong hands.
What is a shared user account?
Definitions & Standards For purposes of this document a shared account is an account that is used by multiple individuals to access systems or data. A service account is an account that is used by an automated process and is not used in an interactive way by a user.
Is sharing a password OK?
1. You compromise your account security. When you share your password with another person, you essentially grant them access to not only that account, but every account you own that uses the same password. One risk of sharing passwords is that your account immediately becomes much less secure.
How to avoid sharing an account among users?
If users in your organization need to share an inbox or manage accounts for other users, we recommend one of the solutions described below. To let multiple people manage messages using a single address, create a group and make it a Collaborative Inbox. Group members with the correct permissions can assign and manage conversations together.
Why are shared user accounts less secure than single user accounts?
In addition to the auditing issue that other answers point out, shared-user accounts are inherently less secure than a single-user account on the same platform. If more people know the credentials for logging in, that account is less secure.
Is it safe to have a shared account?
BTW, if you are regulated by HIPAA, FISMA, etc. shared accounts are NOT compliant. It depends on what type of access/rights are you going to assign to that account. As long as its a normal user account there would be no risk.
What are the risks of managing shared accounts?
Even for the savviest IT teams, the task of managing shared accounts introduces complexities and risks, including: Embedded and hardcoded passwords present opportunities for misuse by both insiders and external attackers on the network.