Walk into almost any jobsite trailer and you may find a computer with a sticky note on the monitor. The username is something like "super" or "trailer1," the password has not changed in years, and a dozen people use it to check plans, print tickets and read email. Everyone knows it, so nobody questions it.
Shared logins feel harmless because they solve a real problem. Crews rotate, turnover is high and nobody wants to wait for IT. But they create security and business exposure that most contractors would not accept if they saw it clearly.
What goes wrong with shared accounts
No accountability
When something goes wrong, such as a deleted file, a changed schedule or a fraudulent email, a shared account cannot tell you who did it. Logs show only the generic name.
No clean offboarding
When a foreman leaves, you cannot remove their access without changing the password for everyone. In practice, nobody does, so former employees and subcontractors keep access for months.
Easy credential theft
A password that many people know is exposed in many ways: shoulder surfing, photos of the screen, texts between crews and reuse on personal accounts. Once an attacker has it, nothing flags the difference between real and malicious use.
Compliance trouble
Contractors who handle federal data or work for regulated customers are expected to identify individual users. Frameworks such as NIST SP 800-171 require unique identification and authentication. A shared login can undermine an otherwise solid program.
Why crews do it anyway
Understanding the reasons helps you fix them:
- Logging in is slow, especially with long passwords on shared keyboards
- Temporary workers have no company accounts yet
- Poor connectivity makes cloud sign-in painful
- Nobody owns the process for creating accounts quickly
- Past security rules were hard to follow in the field
Practical alternatives
Individual accounts with fast sign-in
Give every employee a named account. For shared trailer computers, use sign-in methods that are quick, such as a security key or Windows Hello with a PIN on managed devices, instead of long passwords.
Role-based access
Create a field role with only what superintendents and foremen need: plans, daily logs, safety forms and time entry. Avoid giving general network access.
Shared device, individual identity
Use a shared kiosk-style computer that locks automatically, requires an individual sign-in and keeps almost nothing stored locally. Set a short idle timeout so people cannot continue under someone else's session.
A fast process for temporary workers
Agree on a standard request, such as a one-page form or a ticket, with a same-day turnaround for new field staff. Many shortcuts disappear when the legitimate route is quick.
Password manager for the shared things that remain
Some things, like a shared equipment portal, may not support individual accounts. Store those credentials in a business password manager, restrict who can see them and rotate them when someone leaves.
A rollout plan that respects the field
- Inventory shared accounts. Ask superintendents which logins are shared and where.
- Pick one jobsite as a pilot. Learn what slows people down.
- Set up named accounts and quick sign-in. Test with the crew, not just the office.
- Retire the shared accounts. Set a firm date, and communicate it clearly.
- Review monthly at first. Look for new shared accounts and for stale ones.
Set the expectation from leadership
Field staff follow the example of their superintendents and owners. A short message from the top, explaining that individual logins protect the company and the crew, goes a long way. Explain the reason, not just the rule.
Measure progress
Track the number of shared accounts, the time it takes to onboard a new field employee and the number of accounts without multifactor authentication. These simple numbers show whether the program is working.
How Ironfield Cyber helps
Ironfield Cyber works with contractors to build identity and access practices that fit real jobsites, including fast onboarding and sign-in options for shared devices. If your trailers still run on one password, we can help you replace it without slowing your crews.