Timeline for Is it an acceptable practice for IT to ask an employee for their password over Skype Messenger?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 28, 2018 at 14:06 | comment | added | Hex | Downvote due to the line about knowing the password, as @raterus has said passwords are never stored in plain text as this is bad practice, instead they are hashed. Rest of answer is perfectly sound. | |
| Mar 28, 2018 at 8:05 | comment | added | AdzzzUK | I think you were right to have reservations, as it's good security practice. You know the IT guy in this case was legit. If you have doubts in the future give the IT team a call. I'd never ask for a password, I'd just reset it for you and give you the new password. It sounds like the IT guy has gone above and beyond in this instance to help you out, however probably shouldn't have done. Keep on your toes but I don't see any benefit to reporting this incident as the IT guy may have been wrong to handle it the way he did. | |
| Mar 28, 2018 at 1:55 | comment | added | Jay | Not quite @Dan, a good IT department should not have your password in clear text and therefore don't "know" it. They can reset it, but they shouldn't be able to see the actual characters unless you are using a known or easily guessed password. | |
| Mar 28, 2018 at 1:26 | comment | added | AffableAmbler | I’m guessing the reason he asked is so he could set it back to what I wanted it to be when he was finished. I don’t think he was trying to do anything malicious. Mostly just wondering if it’s something worth reporting or if I should just let it be. | |
| Mar 28, 2018 at 1:20 | comment | added | AffableAmbler | Thanks for the answer. The guy was definitely legit. He was able to fix the problem in about 10 minutes once he figured out what was going on. The person who set up my computer initially didn’t assign it to the right workgroup or something like that. We get emails approximately every two months reminding us to reset our passwords. It always comes from the same address. | |
| Mar 28, 2018 at 0:52 | history | answered | Dan | CC BY-SA 3.0 |