employer has requested password

[savage63073]

Florida

Hi, and while I do not believe that this is precisely the correct forum for this question, I could see no other more appropriate so I am posting it under "Hiring and Firing."

My department chairperson has requested that each person in the department write down all of their passwords to all available systems, put them in a sealed envelope and turn them in. This reportedly will be kept in a locked file cabinet, and is being done "to protect the department from an unforeseen catastrophy."

Aside from the fact that the person who sent the request cannot spell ‘catastrophe’, I am wondering if it is legal for them to demand this. I am afraid that if I do not comply, I will be disciplined, but am equally against turning in my passwords. Any feedback would be appreciated.

Keith

 

[Beth3]

These are passwords that you use to access the employer's business systems and the like? Of course you have to tell your employer what those are if they request it. You use these passwords in the performance of your job and your employer has every right to that information.

In some companies, passwords are assigned - you don't even have the option of choosing your own "secret" password.

 

[sdstrooper]

If your employer wants your password that you use in his/her place of business, give it to him/her. It's not technically "your computer", is it? I guess the reasoning behind it is that if you, for some reason, die or fall into a coma, the company needs your password to maintain the daily operation of the company.

 

[savage63073]

Thanks for the replies. The passwords they are asking for are to log into a network domain, an email server and several database applications. If I got hit by a train on my way home today, a system administrator could close my account, reset my password, or create a new account with appropriate privileges for the person(s) who need it.

I am hesitant to give my passwords because the whole idea of a username and a password is to provide security and record who is doing what at various times. If someone else has my username and password and does something like, for example, spread a virus or distribute pornography, it will have been done under my name. Given that and the fact that a system administrator can give appropriate access to those who need it, I don't see the point of collecting the passwords.

Regardless, the point is that their request does not seem illegal (although I think it should be). Thanks.

 

[BB_Wolfe]

Layoffs are coming, write down your passwords but then change them. After you've gotten your final paycheck and 401K transferred is when you then give the PWD's back.

 

[Beth3]

Savage, I understand your concern but the fact remains that your employer owns these information systems, they grant access, and their purpose is to further the employer's business interests. They have the right to know the "key" that you're using to unlock the door and get inside.

BB, a faulty plan. They don't need the employee's passwords to disable access.

 

[BB_Wolfe]

Beth,

I agree with you, however an employer considers it a royal PITA to have an IT guy or a 3rd party get into the software.

Network access is not an issue, I should have been specific.

BB

 

[JETX]

Beth is correct on this issue (and BB is not).

In order to see this clearly, you need to understand that contrary to individual beliefs, EVERYTHING that is on that company provided computer is owned, operated and maintained by the employer. Simply, it is THEIR property. As such, they have every right to demand access to it.

If you are concerned about them accessing personal information on THEIR computer with the passwords, then don't leave that information on the computer.

I think the 'protection' that they offer you of providing a sealed envelope to be opened only when needed is reasonable (though not legally necessary).

Give them to passwords, the repercussions to denying or hindering may not be appreciated.

 

[hexeliebe]

You have two choices:

1. give them the passwords since you never owned them nor the computer and information on it. This would be the correct and adult thing to do, or;

2. don't give them the passwords, wait until they have to hire someone like me at $150 an hour to do a network bypass then have criminal charges brought against you and the costs of the network bypass charged against you.

 

[porcelina68]

I work for a large company, and my direct supervisor has, in the past, asked all of us in my department for a listing of all of our computer passwords.

Here we have a Complaince department, and we checked with them. We are NOT obligated to provide our passwords to anyone. They are for our personal use only.

They are YOUR passwords, set by you, to make sure that unauthorized people do not have access to your company's information. IMHO, no one but you needs to know what your passwords are. As it was stated, if there is a major problem, the passwords can easily be reset by someone in IT.

 

[JETX]

Porc, so your company has taken the position that you don't have to provide the passwords when requested. That is all well and good, but has NOTHING to do with the law. So, with that, what good is your 'policy' post??

 

[HomeGuru]

Florida

Hi, and while I do not believe that this is precisely the correct forum for this question, I could see no other more appropriate so I am posting it under "Hiring and Firing."

My department chairperson has requested that each person in the department write down all of their passwords to all available systems, put them in a sealed envelope and turn them in. This reportedly will be kept in a locked file cabinet, and is being done "to protect the department from an unforeseen catastrophy."

Aside from the fact that the person who sent the request cannot spell ‘catastrophe’, I am wondering if it is legal for them to demand this. I am afraid that if I do not comply, I will be disciplined, but am equally against turning in my passwords. Any feedback would be appreciated.

Keith

**A: common sense would say that if your employor is asking for the information to access their company owned files, you have no right to refuse to provide said information.

 

[msincognito]

Florida is a right-to-work state (lovely irony in that phrase!) whch means your boss can fire you for just about anything he or she wants to as long as they're not breaking a specific discrimination or labor law in doing so.

That said, they're being stupid, as savage63073's second post points out. In fact, most model IT policies punish employees who give out their passwords.

 

[cbg]

One of my pet peeves here.

Yes, Florida is a right to work state. However, what that means is that you cannot be forced to join a union in order to get work.

What Msincognito means is that Florida is an at-will state. So is every other state except Montana.

Sign me up on the side of those who think the OP should give them the password. It is THEIR equipment; THEIR software. They are entitled to have the passwords.

 

[hexeliebe]

Right to work, right to collect unemployment, worker's rights, the right to be an idiot.
I guess it's all relevant.

This issue has been resolved. The poster has the only answer that will keep him from getting fired immediately and/or charged with theft of service (as I would do if he refused to proffer the asked for password). And that is give up the password.

PERIOD!