Why Sharing Passwords on Workplace Chat Apps Is Risky (And What to Do Instead)

"I'll Slack you the password." It's one of the most common — and most dangerous — sentences in modern offices. Whether you use Slack, Microsoft Teams, or any other workplace messenger, sharing passwords directly in chat creates real security vulnerabilities.

5 Reasons You Shouldn't Share Passwords in Chat

Reason 1: Messages Are Stored Permanently

Slack paid plans and Teams keep messages indefinitely by default unless someone deletes them or a retention policy does (and admins can set legal holds that preserve even deleted messages). Slack Free keeps one year of history.

• Former employees may retain access to chat history
• A compromised account exposes every password ever shared
• Lost devices reveal the full message archive

Reason 2: Admins Can Read Your Messages

Enterprise chat platforms give administrators access to message logs through compliance and audit features.

This means your IT admin — or anyone with admin privileges — could potentially see every password you've shared.

Reason 3: Misdirected Messages

Accidentally posting a password in a team channel instead of a DM happens more often than you'd think.

• Passwords exposed to the entire department
• External guests in shared channels can see them
• Message recall doesn't guarantee no one saw it

Reason 4: Search Makes Passwords Discoverable

Anyone with access can search for "password," "login," or "credentials" and find every password ever shared in chat.

Reason 5: Screenshots Are Unpreventable

Chat messages can be screenshotted instantly. Deleting the message afterwards offers zero protection.

Safer Alternatives for Password Sharing

Option 1: Password Manager Sharing

Tools like 1Password, Bitwarden, or LastPass offer secure team sharing features.

Pros: Centralized management, granular permissions Cons: Monthly cost, setup complexity

Option 2: LOCK.PUB Secret Memo

LOCK.PUB's secret memo feature lets you share passwords through encrypted links that can expire (Pro).

1. Create a secret memo on LOCK.PUB
2. Enter the password you need to share
3. Send the generated link via Slack/Teams
4. Recipient enters the memo password to view
5. Stops opening after the expiry you set

Pros:

• No password plaintext in your chat history
• Customizable expiration (with Pro)
• Free to create (up to 5 links a month on a free account)
• No installation required — browser-based

Option 3: Phone Call

For short credentials, just call the person. It's the oldest security trick in the book.

Information You Should Never Share in Chat

Security Checklist for Teams

1. Create a policy: Ban password sharing via chat
2. Offboarding: Deactivate accounts immediately when employees leave
3. Device management: Clear BYOD policies
4. Enable 2FA: Two-factor authentication on all accounts
5. Rotate credentials: Change shared passwords regularly
6. Security training: Annual security awareness sessions

The Bottom Line

Workplace chat apps are great for productivity, but terrible for sharing passwords. Use LOCK.PUB's secret memo feature to share credentials safely — only a link appears in chat, while the actual password is encrypted and, with Pro, can be set to stop opening after a time you choose. It's a small change in habit that dramatically reduces your security risk.