How 'initial' onboarding passwords become a vulnerability

Colleagues, a cybersecurity note: temporary passwords issued during onboarding often create risk.

What happens:
- Initial passwords are sent in plaintext or set to simple/default values.
- They may never be changed and remain active, easing attackers' access.
- There are real incidents of unauthorized entry to critical systems due to such credentials.

How to reduce risk:
- Stop emailing 'initial' passwords — use a secure self-service password setup.
- Enforce mandatory resets, password complexity and monitoring.

Why it matters: temporary/default passwords are an easy attack vector.

How do you handle issuance of initial passwords in your company?

#cybersecurity #passwords #IAM #onboarding