Contents
When it comes to the secure communication of passwords, you have a few options. Communicate passwords verbally, either in person or over the phone. Communicate passwords through encrypted emails. Sending passwords via unencrypted emails is never recommended.
To help make sharing passwords both easy and secure, we recommend using a business password management platform. These allow users to store passwords in a secure, encrypted vault, where they can also be shared to other colleagues in groups or teams.
No. Password sharing creates accountability and non-repudiation issues as User A, connected to the network with the credentials of User B, can access User B’s data and applications; send emails in their name, etc… In the case when an employee has a planned leave, emails can simply be forwarded to another person.
How does NHSmail work as a secure email service?
NHSmail is a secure email service which means that data can be sent safely and securely to other email addresses which meet the same high standards of accreditation. NHSmail also allows users to securely exchange information with insecure or non-accredited email services via the NHSmail encryption feature.
When to use a non secure email address?
This feature must be used if you are sending any personal or confidential information to a non-secure email address, such as a patient email address. You must never send personal, sensitive or confidential information to a non-secure email address unless it is encrypted.
What are the consequences of sharing a password?
Educating users about the dangers and consequences of password sharing is a step in the right direction. However, despite the education and numerous user security awareness programs, employees continue to share as there is no consequence on their own access to the network.