The password manager conversation with a reluctant team
Nobody wants a password manager until the day someone leaves still knowing the reception password.
The password manager is the tool everyone agrees with in principle and quietly resists in practice. People have a system that works for them, usually a notebook, a browser full of saved logins or a shared password everyone types without thinking. Telling them their system is bad rarely lands. The change happens when the useful truth does: the day a member of staff leaves, they walk out still knowing every shared password in the building.
That is the honest reason a manager matters, and it is worth leading with. It is not about being told off for reusing a password. It is that shared logins cannot be changed without disrupting everyone, so they never get changed, so they follow ex-staff, ex-contractors and the person who came in for a fortnight two summers ago. A manager lets you share access to an account without anyone ever seeing the password, and remove that access the day someone goes.
The rollout is where good intentions die, so keep it small. Pick one manager, set it up yourself first so you can actually answer questions, and start with the shared accounts that cause the most pain rather than asking everyone to migrate their whole life at once. Show one person the auto-fill, let them feel that it is faster than typing, and let them tell the others. Peer proof beats a policy email every time.
Be honest about the effort, because pretending it is effortless is how you lose trust. It is a slightly annoying week while people build the habit, and then it is genuinely easier than what came before. The reluctant ones usually come round the first time it fills a long password on their phone without them squinting at a Post-it. That is the moment the argument is over.
- ✓List every shared or reused password and note who currently knows it.
- ✓Choose one password manager and set it up yourself before rolling it out.
- ✓Move the most-shared accounts in first, sharing access without revealing the password.
- ✓Change any password a departing member of staff knew on their last day.
- Password managers: how they help and how to choose one NATIONAL CYBER SECURITY CENTRE ↗
- Using passwords to protect your devices and data GOV.UK ↗
- Best password managers, tested and rated WHICH? ↗
Links open each publisher’s live coverage of this topic.