textdrop.sh
Guide · Passwords & credentials

How to send a password securely in Microsoft Teams.

Teams chat is convenient, searchable, and often retained. Send a one-time encrypted link in Teams, not the password itself.

August 4, 20264 min read

The short answer

Create a password-protected, burn-after-read link and paste only that link into Teams. Send the additional passphrase by phone, Signal, or another independent channel. Use textdrop.sh to make the link in your browser, then share the link instead of the sensitive text.

Do this. Not that.

  • Do
  • Use a short expiry and burn-after-read for a one-off handoff
  • Send the link and passphrase through separate channels
  • Rotate or revoke temporary credentials after the work is done
  • Don't
  • Paste a password, API key, or connection string directly into a Teams chat
  • Put the password in the same message as a protected file
  • Use a one-time link for ongoing team access; use a shared vault instead

Make a link now

Share a password without leaving it in Teams history.

Burn-after-read and password protection are enabled. Share the link in Teams and the passphrase separately.

Why this matters

Teams conversations can be retained, searched, and included in compliance or eDiscovery workflows, depending on your organization's configuration. A password pasted into chat becomes another durable copy of a live credential.

A one-time link changes what Teams stores: the chat contains a URL, not the secret. After the intended recipient reads it, burn-after-read removes the encrypted paste, leaving an unusable link in the retained conversation.

Common questions

Is it safe to send a password in Microsoft Teams?+

Do not send the password itself in Teams. Chat messages may be retained and searchable. Send an encrypted one-time link instead, then share any additional passphrase through another channel.

Will a Teams link preview consume a burn-after-read paste?+

No. textdrop.sh separates metadata from encrypted content, so a link preview does not fetch the ciphertext or consume the one-time read.

What should I use for ongoing access?+

Use a password manager's shared vault or your organization's access-management system. One-time links are for short, human-to-human handoffs, not ongoing credential distribution.

Keep reading