Is it okay to have your computer save your HMIS login password to save time?

Is it okay to have your computer save your HMIS login password to save time?

• A. Yes, it's convenient.
• B. No, it is never okay to save HMIS passwords.
• C. Only on personal devices.
• D. Only if you log out afterward.

Answer: (B)

Saving HMIS passwords on a device creates a real risk to the security of sensitive client information. If the device is lost, stolen, or compromised by malware, someone could access HMIS data without re-entering credentials, bypassing the intended authentication checks. HMIS environments are governed by strict security policies to protect confidential information, and storing passwords undermines those controls and can violate privacy rules. The safer practice is to enter the password each time and rely on proper logout and session management, not on automatic login. If you’re having trouble with time, use the agency’s approved login processes and keep the device secure—lock the screen when away, and report any security concerns. That’s why saving the password is not acceptable.

Saving HMIS passwords on a device creates a real risk to the security of sensitive client information. If the device is lost, stolen, or compromised by malware, someone could access HMIS data without re-entering credentials, bypassing the intended authentication checks. HMIS environments are governed by strict security policies to protect confidential information, and storing passwords undermines those controls and can violate privacy rules. The safer practice is to enter the password each time and rely on proper logout and session management, not on automatic login. If you’re having trouble with time, use the agency’s approved login processes and keep the device secure—lock the screen when away, and report any security concerns. That’s why saving the password is not acceptable.