A simple onboarding flow
- Create each temporary password with a unique value, never a shared default.
- Share every credential as its own one-time link with a short expiry, such as one hour.
- Send links to the new hire's personal email or chat before the first day, or hand them over in person.
- Require a password change at first login, so the shared value is useless once opened.
What to avoid
- One email containing every login for the new hire.
- The same temporary password for everyone in a cohort.
- Passwords posted in team channels so "anyone can help".
Why it helps IT and HR
When the secret is deleted after viewing, a later mailbox search or compromised account finds nothing. If a link is opened by someone else first, the new hire sees an error and you know to reset that credential.
Frequently asked questions
Should temporary passwords be emailed to new employees?
Avoid it. Email is stored and searchable. Send a one-time link and require a password change on first login.
What if the new hire opens the link late?
Use an expiry that matches your process. If the link has expired, create a new one; nothing sensitive remains from the old one.
Share a secret now
Create a one-time, self-destructing link in seconds. No account needed.
Create a secret link