Credential sharing and compliance: ISO 27001, SOC 2, GDPR
How controlled credential handover maps to ISO/IEC 27001:2022 Annex A, SOC 2 CC6, Cyber Essentials and UK GDPR Article 32, and the evidence auditors ask for.
Blog
Practical guidance on sharing passwords, keys and other secrets without leaving them lying around.
Blog: all articles
Handing over a shared account that uses 2FA
How to hand over a social media, vendor portal or admin account protected by an authenticator app, from individual logins to moving the TOTP seed safely.
One-time links vs password managers: which to use when
A password manager stores credentials your team keeps using. A one-time link hands one to someone outside the vault. How to choose, and how they fit together.
Server-side vs end-to-end encryption for secret links
What server-side and end-to-end encryption each protect against, how ShareShield's server-side envelope encryption works, and what to use if you need E2E.
What an audit trail for shared secrets should record
The events to log when you share passwords and keys (created, opened, by whom, failed attempts, burned, expired), what never to log, and how long to keep it.
Password sharing in remote teams: where credentials leak
Remote teams share passwords in chat, email, tickets and recorded calls. Where those copies end up, how to find them, and a handover routine that leaves none.