Shared Screen Gateways Password

[HeihoSilver]

Hi,

In my company the Gateways is managed and setup by IT consultant company (not same company as mine).

In one of the gateways setup, I need to enter my credentials via shared screen session/remote session (most of the IT support we have is conducted via remote session).

The scenario is the IT support have the Gateways setup in their desktop/screen. Later, he/she share their screen to me and share control with me in order for me to write my credentials in their screen. Everything is working properly with scheduled refresh using the mentioned gateways. 

The question:

• Is it safe and secure to enter my credentials like the above scenario?
• Is it possible that the password I typed via shared screen session being copied by the IT support who setup the gateways? (e.g. Ctrl C and paste somewhere else later). I tried to login to different websites simply for testing the copy paste password. I found that it is not possible to use copy paste as long as the "show password" is not visible. Since I don't have access to manage gateways myself, I couldn't test it myself. 
• Is there any other best practice if the gateways is managed by other contractor (IT consultant company)?

Best regards,

HeihoSilver

[lbendlin · Accepted solution]

We do it the same way and found it to be sufficiently safe. As you mentioned the "reveal"  eye icon should be avoided. 

It helps to ask the developer what keyboard they are using BEFORE attempting to enter the password. If it is different from the keyboard the gateway admin uses (often the case in multinational companies) then the gateway admin needs to install all the required language packages that allow keyboard switching.