<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Does your library have a policy about the proper way (and
unacceptable ways) to store passwords? Do you know of any such
policy from OLC or some other library organization?</p>
<p>I've seen frameworks for developing your own security policies,
but I'd like something quick and easy, to be able to say "so and
so library does this or that."<br>
</p>
<p>Something that was on my list for this year was to develop
security policies like this and get them officially approved so
that I could enforce them easily. Obviously, plans for 2020
changed. In the absence of a policy like that, I'd like to have
something more than "Phil says you should/shouldn't do this" for
issues beyond taping your password to your monitor or hiding it
under the keyboard.</p>
<p>The main issue is passwords for shared accounts, which I of
course try to minimize but can't completely eliminate. At least
one department has passwords in their printed manual, which of
course means they're saved in a Word document somewhere
(unencrypted I'm sure), and some departments are moving their
documentation to our Google-based intranet.</p>
<p>I plan to suggest that staff use a password manager. I would love
to have a subscription to a business-level one where things could
be managed centrally, including pushing out changes to shared
passwords, and I see that TechSoup now has Dashlane Business, but
I think I'll have to settle for free, individual subscriptions,
which would still be a lot better than nothing. So far I've only
found one library that pays for a business-level password manager.<br>
</p>
<p>I would appreciate any thoughts you have about any of this.<br>
</p>
<p>Phil<br>
</p>
<p class="MsoNormal" style="line-height:115%"><b><span
style="font-family:"Arial",sans-serif">Phil Shirley</span></b><span
style="font-size:10.0pt;line-height:115%;font-family:"Arial",sans-serif"><br>
<i>IT Manager</i><br>
<b>Cuyahoga Falls Library</b></span><span
style="font-size:9.0pt;line-height:115%;font-family:"Arial",sans-serif"></span><span
style="font-size:10.0pt;line-height:115%;font-family:"Arial",sans-serif"><br>
<b>p.</b> 330.928.2117 x109 <b>e.</b> <a
href="mailto:pshirley@cuyahogafallslibrary.org">
<span style="color:windowtext;text-decoration:none">pshirley@cuyahogafallslibrary.org</span></a>
<br>
<b>w. </b><a href="http://www.cuyahogafallslibrary.org/"><span
style="color:windowtext;text-decoration:none">cuyahogafallslibrary.org</span></a>
<b>a. </b>2015 Third Street, Cuyahoga Falls, OH 44221</span></p>
<p class="MsoNormal"><a
href="https://www.facebook.com/fallslibrary/"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;text-decoration:none"><img
id="Picture_x0020_5"
src="cid:part3.64968BE1.B53C1B18@cuyahogafallslibrary.org"
width="24" height="24" border="0"></span></a>
<span
style="font-size:10.0pt;font-family:"Arial",sans-serif"> </span><a
href="https://twitter.com/FallsLibrary"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;text-decoration:none"><img
id="Picture_x0020_6"
src="cid:part5.9BE8A7DB.F7103F0F@cuyahogafallslibrary.org"
width="24" height="24" border="0"></span></a><span
style="font-size:10.0pt;font-family:"Arial",sans-serif"> </span><a
href="https://www.instagram.com/fallslibrary/"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;text-decoration:none"></span></a></p>
</body>
</html>