What's the Best Way to Share Sensitive Information on Slack?
Asked by
CuriousCat42
When you need to share something sensitive and everyone is already using Slack, what approaches do you take? I've noticed various methods like pasting and deleting, sending password manager links, or just handling situations as they arise. I'm curious about what practices are common in the teams you've been part of.
Answers
If you're working as a team, consider using GPG keys to encrypt any secrets before sharing them. It's been a reliable method for many years. Just make sure everyone is on board with the setup; it can be a bit challenging for some to implement.
Reply to this answer
Definitely recommend using 1Password or a similar tool for sharing credentials. It's important to ensure that only the right people have access to sensitive information. Also, if you just need to send something temporarily, onetimesecret.com is a great option!
Reply to this answer
The best practice really is to avoid pasting sensitive information directly into Slack. Instead, use secure methods like a password manager to share links safely. There are various tools out there that can help you manage this securely. If you do ever paste something, rotate it immediately to minimize risk!
Reply to this answer
I've found that using links from tools like Keeper or Bitwarden allows for secure sharing without exposing secrets directly in chat. Just remember, if something gets shared in plaintext, it needs to be rotated ASAP!
Reply to this answer
Honestly, I don't think you should share secrets in Slack at all. Use a dedicated solution or a password manager that allows sharing. If information is sent through Slack, treat it as compromised and get it changed after!
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions