Let’s talk about something many of us see almost every day without giving it much thought.

You log into your email, an application, or a website, and suddenly your browser asks:

“Save password?”

It looks helpful. You don’t have to remember the password or type it again the next time you log in.

But here’s the thing:

Your password is a security credential. It should not be saved just because it is convenient.

Saving passwords in browsers, notes, spreadsheets, messages, or other unsecured locations creates another place where your credentials could be exposed.

Why Saving Passwords Can Be a Risk

Your password is one of the things protecting your account.

If it is saved somewhere and someone gains access to that location, they may be able to retrieve it and use it to access your account.

For work accounts, that could mean access to:

Your email, Company files and documents, Business applications, Sensitive information & Other systems connected to your account.

You may think, “Nobody else uses my computer.”

But devices can be lost, stolen, compromised, or accessed by someone who should not have access.

Why create another opportunity for your password to be exposed?

Where Should You NOT Save Your Password?

Do not store passwords in places such as:

Your web browser, Notes or Notepad, Word or Excel documents, Sticky notes or notebooks, Email messages, WhatsApp or other messaging platforms, Personal cloud storage & Unapproved password management applications.

What Should You Do When You See “Save Password?”

The next time that prompt appears, don’t just click “Save” because it is convenient.

Instead:

Select “Never,” “Not now,” or the equivalent option.

If you need help managing multiple passwords, use an organisation-approved password manager where one is provided.

And remember, never send your password to someone else, even if they claim they need it to help you.

What If You Have Already Saved Your Password?

Don’t panic.

Remove the saved password from the browser or application.

If you believe someone may have accessed or obtained the password, change it immediately and report the situation to IT.

Common Thinking to Avoid

• It’s only saved on my computer.
• I’ll remove it later.
• It’s too difficult to remember all my passwords.
• The browser is secure, so there is no problem.
• IT asked me for my password, so I’ll send it.

These assumptions can make it easier for your credentials to be exposed.

Final Reminder

Your password protects your account, your information, and potentially the organisation’s information.

Don’t make it easier for someone else to obtain it.

When you see:

“Save password?”

Take a moment.

Don’t save it.

Keep your credentials private, protected, and secure.

🔐 CyberDesk – Protecting Our Digital Workplace