Employees often have multiple login credentials for multiple accounts and remembering each password can be difficult – especially when covered entities enforce the best practice of using long and complex passwords. Therefore, the temptation is to make a list of passwords and save them in a spreadsheet in plain text. The problem with this is that anybody with physical or remote access to the workstation can access the spreadsheet and all the passwords saved in it.