Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I work with some bigger clients that have large IT departments, they always send me my login details via email. If my email was being watched by a nefarious type, they could easily gain access to sensitive data.

What would be a better way to share this kind of data with someone?

share|improve this question
up vote 8 down vote accepted

You could request that emails are PGP encrypted, requiring you to decrypt the email on your end.

The could create a password-protected Word or PDF file and email that to you as an attachment with a predetermined password that you discussed on the phone.

They could call you on the phone and you could write down the credentials in a secure password keeper like 1Password.

Another option may be to setup provide the person with an application that connects securely to a web service and uploads the data over an SSL connection.

share|improve this answer
    
+1 for Public-key encryption using PGP – RedGrittyBrick Oct 25 '11 at 10:15
    
Remember that password protected word files do not protect against a brute force attack – Matt Wilko Oct 25 '11 at 13:57

For SFTP logins, you could send them your public SSH key so that they enable it, and you use no password at all, but only a passphrase which unlocks your key.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .