Ground rules

1. Passwords are never stored in Library, Google Drive, Slack, etc. They can only be stored in TMD’s official password manager, which only The Big 3 (EIC, ME + DME) and a few other people have access to. Read more about our password manager here.
2. To get a password, ask one of The Big 3 to check the password manager and securely send it to you. You are not allowed to share the password with anyone else unless you get approval from The Big 3. If you receive a password for an account, you should not change the password without talking to The Big 3 who will need to update the password manager.
3. Store your personal passwords in your own password manager. Password managers are secure, smart and easy to use. We recommend Bitwarden, LastPass or 1Password.
4. Need to make a new account for something? You must talk to The Big 3 or the Student Publications Professional Staff first, before you can make any new accounts on behalf of The Daily. You cannot create an account with a personal/school email address on behalf of The Daily.
5. Creating or updating a password? Make sure the new password is a long random string of characters including numbers, symbols, capital letters, etc. It should not contain your name, or The Daily, or be similar to a password used elsewhere. Again, please do not reuse passwords

Why account security is important

Cybersecurity is becoming more and more important across all industries. As The Daily shifts to having a larger digital presence with more and more accounts, we also increase our surface area for attacks. Most hacking comes from just guessing or obtaining passwords to accounts. This is why every account The Daily uses needs to be accounted for and needs to have a unique and secure password.

If someone gained access to one of our accounts, they could take down our website during an important news day, stain our reputation on social media (with over 50k Twitter followers, for example, one bad tweet could go viral and give us lasting damage) or they could spend money in accounts that have linked bank accounts or credit cards. The security of The Daily is up to all of us, and we can do it by simply following the ground rules above.