If you work as a programmer, contractor, or freelancer, you’ve almost certainly had to send a password, API key, database credential, or client login to someone else. Slack messages, emails, and text threads feel convenient, but they’re some of the worst places to put sensitive credentials. They sit in plaintext in inboxes and chat logs indefinitely, get indexed by search, get forwarded, and get breached along with everything else in that account.
