SecureDrop: How to Communicate Sensitive Password Information
Securely Communicating Passwords
When
dealing with sensitive information such as usernames, passwords, and
access credentials, it's crucial to use a secure communication channel.
Traditional methods like email are not ideal, as they can be stored on a
server indefinitely and may be vulnerable to breaches. To ensure the
highest level of security, WebVault offers SecureDrop, a safer alternative for sharing sensitive details with our team.
What is SecureDrop?
SecureDrop is an online pastebin with zero-knowledge encryption. This means that WebVault’s servers never have access to the plain-text content of your messages.
How to Use SecureDrop
To securely share sensitive information with WebVault’s helpdesk, follow these steps:
Go to SecureDrop: Visit https://securedrop.webvault.com.au/.
Enter Your Message: Type or paste your sensitive information into the SecureDrop editor window.
Set Expiry Time: At the top of the page, choose when you want the message to expire. The default setting is two weeks, but you can shorten this period as needed.
Generate a Secure Link: Click the Send button to create a unique, encrypted link.
Share the Link Securely: Copy the link and provide it to the WebVault helpdesk by pasting it into a support ticket or email.
Once
the link expires, the information is no longer accessible, ensuring
that credentials do not persist on our system. This significantly
reduces the risk of exposure in case of a data breach.
Warning: When Using SecureDrop
Never Store Credentials in SecureDrop: SecureDrop links expire and cannot be recovered. If you need to retain credentials, copy them into a permanent and secure location, preferably, an encrypted password manager.
Only Use SecureDrop for Credentials: Avoid sending sensitive details via email or other less secure methods.
WebVault Always Uses SecureDrop: Our technicians will only share credentials with you through SecureDrop. If you receive sensitive information via any other method, contact our support team to verify its legitimacy.