Farmhouse Networking has had a long standing policy that we do not keep a record of client passwords (except when needed for device administration). That is about to change, but before we talk about our new password policy let’s talk password storage:
Common Password Storage
Here are some popular places where many businesses store their passwords that make them very vulnerable to being stolen.
Passwords written on paper (that are not under lock and key):
- On your desk under your keyboard (or taped underneath)
- Under your stapler or desk decorations
- On sticky notes stuck to your monitor or desk
- On a scrap of paper on your desk or in a drawer
- In a notebook or address book
- In a old-fashioned Rolodex file
- Paper printouts or photocopies of your passwords
Anyone with access to your office could easily find and steal passwords stored like this.
Passwords stored in your computer (without using encryption):
- Remembered in your web browser
- A document called “Passwords” that you’ve created anywhere on your computer, perhaps using Microsoft Word or Excel
- A document with any other name on your computer (including the password as the name)
- Email drafts that you’ve created (but not sent) containing password information
Anyone with access to your computer could easily find and steal passwords stored like this, including both a person with physical access to it as well as a virus or hacker gaining access via the internet, or scamming you into granting them access, even once.
Passwords stored in your smartphone or tablet (without using encryption):
- Electronic “Notes” containing password information
- Other documents or emails similar to the ones listed in computer storage above
Anyone with access to your device could easily find and steal passwords stored like this.
Passwords sent via regular (insecure) email:
- Emails that you have sent to yourself containing password information
- Emails that you have sent to anyone else containing password information
Any information that you send using regular (unencrypted) email puts that information at risk of being stolen. Email is neither private nor secure. Sending an email is like mailing a postcard, and hackers and thieves can easily read the contents. You should never send passwords (or any other confidential or sensitive data) via regular email.
Secure Password Storage
Now for the discussion of Farmhouse Networking’s new password policy. We are partnering with a company to provide a storage of passwords and other client documentation with military grade encryption. This partnership also allows us to address the dangers that common password storage present by offering our clients this same encrypted password storage service. Here are some of the benefits of this service:
- Unlimited users
- Unlimited passwords
- Each user has a personal password vault
- Shared company password vault
- Security groups to manage access
- Auditing & reporting (Compliance)
- Secure password sharing
- 1-Click Login Tool (for all major browsers)
- Mobile Device Access
- Only $15 per month (Compared to Lastpass Business at $4 per user per month)
If your company is using common password storage of any kind do yourself a security favor and contact us to upgrade to secure password storage.
