All designers log into Figma and Dropbox with the same password. We don't know who did what, and when someone deletes something we can't figure out why. Very risky.
Shared passwords are very risky. Protocol: Everyone should have their own individual account. Access should be controlled via Access Management (Admin Panels). Use password management software (BitWarden, 1Password).
we were doing the same thing with the same password... we never knew who deleted what. then i set up BitWarden and it was fixed
We need to take it step by step. Security isn't absolute; it's about making attacks not worth the effort.
Proven by experience.
Good call starting this thread. Solutions that work at a small scale collapse when you grow; I learned this late.
Proven by experience.
Do you think this works at any scale? If 2FA is on, a stolen password alone is useless.
An untested backup is not a backup. Just leaving this note, it might be useful.
There's also a measurement aspect to this. honestly mistakes made on the password sharing within the team side are usually reversible but expensive.
Correct me if I'm wrong.
This is exactly what we experienced. Everyone rushing into password sharing within the team gets stuck at the same point.
Of course, it varies if your situation is different.
Doki · Log management setup · 2026
We've heard this a lot, but it never happened like that for us. Everyone rushing into password sharing within the team gets stuck at the same point.
Hope this helps.
we experienced almost the exact same thing last year. if the notification path is long notifications don't arrive; missing notifications mean delayed incident detection.
that's all, sorry if I went on too long.
Quick summary for newcomers: The answer varies greatly by industry; there is no one-size-fits-all rule.
Payment information changes are never verified through the channel they came from. Of course, it varies if your situation is different.