Don't share a password between people directly. Separate identity and authorization. Keep an audit log. Use a password manager to share passwords that you absol

Don't share a password between people directly. Separate identity and authorization. Keep an audit log. Use a password manager to share passwords that you absolutely have to share for some reason. Avoid this as much as possible and use OAuth/SAML everywhere you can for humans and something like Vault for machines.