[somehnguy]

Oof, that sounds bad.

My current company has an internal ‘secret sharing’ tool kind of like Pastebin (but encrypted, one time open links, etc) for one off sharing of things like that. For all other creds we use Vault heavily.

PII, passwords, things like that are NEVER to go over Teams or email.

[nightski]

If these are temp passwords that get changed on first login and expire maybe it's not so bad. If it is a normal password though yes that is pretty bad.