As web developers we need to supply sensitive data to the clients. Clients are u

Question

As web developers we need to supply sensitive data to the clients. Clients are usually not very good with computers. They can send an email, pick up a phone call or open a webpage. But won't be able to set up PGP in their email client.

What would be a good way to send them their login credentials? Are there any services that can help us with this? It needs to be reasonably simple and reasonably secure (generally more secure then sending in an email).

Problem with most ready-made solutions (Basecamp, Slack) is that they send you an email notification with message contents.

Explanation / Answer

I am of the impression that you require an automated method, I would recommend using SMSes to send the information to your clients. There are a number of number of web based SMS APIs out there such as Twilio and Plivo. They might not be free but the cost is generally in cents. You would preferably want to generate a new password and send it to them. For additional security, you might want to force them to change the password on first login or even set the temporary password to expire after a certain duration.

Intercepting SMS messages is possible, but there is a much higher barrier as compared to intercepting web communications.

Related Questions

Navigate

• Browse (All)
• Browse A
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.