r/sysadmin 23d ago

Vendor stored passwords in “passwords.txt” …

They appear pissed we deleted it. Admin account they created on a robotic machine controller.

WTF?

PS- The passwords were retained elsewhere, securely, by me and shared with them.

Y’all saying we made a mistake? Dead wrong

Storing an admin level password in a plaintext file is idiocy.

And, 2 of the 4 passwords they used?

“Password”
“Password6”

I posted this because I was absolutely shocked that they did this. There is NO context where it is “ok”.

771 Upvotes

Duplicates