Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

When I work with some bigger clients that have large IT departments, they always send me my login details via email. If my email was being watched by a nefarious type, they could easily gain access to sensitive data.

What would be a better way to share this kind of data with someone?

share|improve this question

2 Answers 2

up vote 8 down vote accepted

You could request that emails are PGP encrypted, requiring you to decrypt the email on your end.

The could create a password-protected Word or PDF file and email that to you as an attachment with a predetermined password that you discussed on the phone.

They could call you on the phone and you could write down the credentials in a secure password keeper like 1Password.

Another option may be to setup provide the person with an application that connects securely to a web service and uploads the data over an SSL connection.

share|improve this answer
    
+1 for Public-key encryption using PGP –  RedGrittyBrick Oct 25 '11 at 10:15
    
Remember that password protected word files do not protect against a brute force attack –  Matt Wilko Oct 25 '11 at 13:57

For SFTP logins, you could send them your public SSH key so that they enable it, and you use no password at all, but only a passphrase which unlocks your key.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.