Password Sharing Policy

These instructions can be used for sharing any type of sensitive information, though this document specifically focuses on passwords.

If the user has an existing Lastpass account that is the preferred method for sharing. You can find those instructions here: https://support.lastpass.com/help/how-do-i-share-an-item
If the user does not have Lastpass then the preferred tool to use to share a password is https://onetimesecret.com/.

Graphical user interface, application

Description automatically generated

Enter the sensitive info needing to be shared where it says “Secret content goes here…”. Only enter the password. Send additional information like a username or description of what the login is for separately in an email. This way if the onetimesecret link happened to be compromised the attacker would not likely have enough information to be able to use it.
Hit “Create a secret link”. Copy the url that is generated and send it to the user.