Hand out first-day credentials safely

The problem

Initial credentials sent by email or posted in a ticket outlive their purpose. They sit in mailboxes and ticket histories long after the person has changed their password.

How shhnote.com helps

• One link per person. Create a separate one-time secret for each new starter, so each link is read once, by one person.
• Files and text together. Attach a VPN profile or a certificate alongside the instructions.
• Proof of a single read. If the recipient finds the link already opened, something else read it first, and you know to reset the credential.
• A short expiry. Pick a lifetime that covers the first day, so unopened links clean themselves up.
• Automation. For many starters at once, the documented API creates links from your own scripts.

Good habits

Send the link and any passphrase through different channels, for example the link by email and the passphrase in person or by phone.

More use cases.