Lesson 7.7
Passwords, Accounts & Access Security
Estimated time: 7 minutes
A password protects more than an account.
It may protect:
- customer information
- company money
- social-media pages
- documents
- internal systems
Poor Password Behavior
Examples include:
- writing a password somewhere anyone can see
- sharing your login casually
- using the same weak password everywhere
- giving verification codes to another person without checking why
- staying logged in on public/shared devices
- allowing someone else to work under your account
The National Information Technology Development Agency’s (NITDA’s) current cybersecurity guidance recommends practices such as multi-factor authentication, keeping software updated, verifying senders before trusting links or sharing information, and using secure connections for sensitive activity.
Scenario — “Send Me the Code”
You receive a phone call:
“This is IT support. We need the six-digit code that just came to your phone so we can repair your account.”
You did not request support.
What should you do?
Do not give the code simply because the caller sounds confident.
Use the organization’s approved support process to verify the request.
Shared Accounts
Some small workplaces share accounts.
Where possible, employers should create appropriate individual access and permissions so actions can be managed properly.
Where shared access is genuinely required, follow the business’s security procedure rather than casually distributing passwords.
Remember
A password is not a workplace group secret.