12 Jan Help available underlines why divulging passwords is never advisable
Help available underlines why divulging passwords is never advisable
Mid-Bedfordshire Conservative MP Nadine Dorries tweeted recently that she reveals her Parliamentary log-in details to her team, including interns on exchange programmes, and frequently has to ask them to remind her of the password.
It has been well-documented that Ms Dorries’ revelations came less than six months after hackers tried to access MPs’ email accounts and that the House of Commons staff handbook specifically tells employees to avoid divulging their passwords.
Even if you don’t work in the Mother of Parliaments, however, hers is not behaviour we advise you to emulate.
Revealing passwords runs a host of risks, including providing unauthorised access to sensitive data and creating confusion over who has actually sent important emails.
Also, as the managing director of Parliament’s digital service was reported as telling MPs, rightly, following the Dorries revelations: “In most scenarios, the solution [to working insecurely by sharing passwords or logging into someone else’s account] is to provide colleagues with delegated access to your email and calendar, via their own accounts.”
If you browse this site regularly, you’ll know the area of data security is one we take very seriously. We partner with the two most appropriate high-quality providers available, Sophos and LinOTP, which are recognised by analysts and customers as market leaders in their fields and provide unsurpassed security standards.
Sophos Group is a security software and hardware company. It develops products for communication endpoint, encryption, network security, email security, mobile security and unified threat management.
Primarily focused on providing security software to mid-market organisations with from 100 to 5,000 employees, Sophos is not only listed on the London Stock Exchange but within the FTSE 250 index its largest companies.
Sophos produced its first encryption and antivirus products in the 1980s and today its products protect over 100,000 businesses and 100 million users, in more than 150 countries.
LinOTP is an enterprise level, innovative, flexible and versatile one-time password platform for strong authentication. Developed and maintained by German company KeyIdentity, LinOTP is used for purposes including small individual installations, middle-sized company scenarios and satisfying cloud provider requirements.
Based on the Linux computer operating system, LinOTP is an open source authentication server implemented as a web service.
Due to its highly modular architecture, LinOTP works regardless of its vendor and supports different authentication protocols, token types and user repositories. The software supports multi-tenancy, is easily scalable, is user friendly and can be implemented quickly and simply in virtually any environment.