Guides

Practical notes on handing over passwords and API keys without leaving copies behind, and on what to do when one has already gone out.

• How to share a password with a colleague without leaving it in the chat

  Why a password sent in Slack or Teams stays readable for years, and how to hand one to a colleague through a link that is encrypted and opens only once.

• How to give an API key to a contractor

  Give a contractor their own limited API key, keep it out of email, tickets and git, and hand it over through a link that opens once and tells you it arrived.

• I already sent a password by email. What now?

  A password sent by email stays in several mailboxes and backups, and deleting it does not help. Change it, check the account, and send the new one properly.

• How to check whether a password has leaked, without giving it away

  How Have I Been Pwned checks a password against breach data without seeing it, what PassAlong sends, and what to do when a password turns up in a leak.