Users storing passwords on personal gmail accounts

Posted by Positive_Meaning1665@reddit | sysadmin | View on Reddit | 108 comments

I work in healthcare IT and a user told me today that everyone in his department created a personal gmail account to store their work passwords on and that they use the same password for everything. They wanted me to reset their gmail accounts which I obviously don’t have access to do because they made it. How do you all handle situations like this? I reported this to my manager due to my concern of PHI being accessed. Maybe I did the right thing reporting it but I also am worried that I am overreacting.