Cybersecurity
Passwords & Credentials
The most common finding in every OT assessment.
Written guides in this section
Full references, procedures, and diagnostic guides published under Passwords & Credentials.
Shared Account Problems
Why the shared operator login, the vendor account everyone knows, and the single PLC password are the weakest point in most utilities: no accountability, no offboarding, no detection. Containing what cannot be avoided and migrating the rest.
8 min readUpdated Sep 5, 2026
Password Policy for OT
A password policy that fits a control system rather than an office: length over complexity, rotation on events, screening against breached lists, multi-factor authentication, no lockouts that take control from an operator, and unique vaulted device passwords.
8 min readUpdated Sep 5, 2026
Credential Storage
Where the passwords and keys of a control system are kept: a vault with individual access and a log, break-glass copies in a safe, platform credential stores for service accounts, and the places they must not be, from spreadsheets to project files.
8 min readUpdated Sep 5, 2026
Default Credentials
The passwords printed in the manual: where they hide in a control system, why they are the first thing an attacker tries, how to find every one on site, and the procedure for changing them without locking yourself out.
8 min readUpdated Sep 5, 2026
Topics in this area
Shared Account Problems
Shared Account Problems — practical reference notes for controls engineers, integrators, and technicians working with passwords & credentials.
Password Policy For OT
Password Policy For OT — practical reference notes for controls engineers, integrators, and technicians working with passwords & credentials.
Credential Storage
Credential Storage — practical reference notes for controls engineers, integrators, and technicians working with passwords & credentials.
Default Credentials
Default Credentials — practical reference notes for controls engineers, integrators, and technicians working with passwords & credentials.
Direct contact
Have a controls question?
Reach Eric Sullivan directly about anything on this site, a controls or automation topic, or one of his personal projects.
References to manufacturers, products, model numbers, software platforms, technical specifications, companies, standards organizations, or other organizations are provided for informational purposes and do not imply sponsorship, endorsement, authorization, or affiliation unless expressly stated. Manufacturer specifications must be independently verified against current manufacturer documentation.