Best Practice: Protecting Your Account Passwords in Vyne Trellis

Purpose

This document provides clear, practical guidance for both internal teams and customers on maintaining account security. For Vyne employees, it helps you explain to dental practices why secure password management matters and how to reinforce best practices confidently and consistently.

Why This Matters

Protecting account credentials is essential to safeguard patient data, financial information, and system integrity. Shared or weak passwords continue to be a major cause of security incidents across industries.

  • Data exposure: Shared credentials can be accidentally disclosed or intentionally misused, increasing the risk of unauthorized access.
  • Loss of accountability: When multiple users share one login, it becomes impossible to confirm who performed specific actions.
  • Compliance impact: Regulations such as HIPAA, GDPR, and SOC 2 require individual user access for privacy and audit accuracy.
  • Increased breach risk: Compromised passwords remain one of the most common sources of data loss and service disruption.

According to the Verizon 2025 Data Breach Investigations Report, over 80% of breaches involve stolen or weak passwords. Maintaining strong, unique credentials is a foundational control that protects both operational systems and customer trust.

Recommended Best Practices

Encourage customers and their team members to follow these simple steps:

  1. Use Individual Accounts: Each person should have their own login credentials to maintain visibility, control, and accountability.
    Consequence: Shared logins have prevented organizations from determining who accessed patient or financial data, resulting in audit failures, compliance violations, and fines.
  2. Avoid sharing credentials via email, chat, or text: Do not send passwords through unencrypted communication channels.
    Consequence: Many documented breaches occurred after credentials were shared over email or messaging tools, allowing unauthorized individuals to gain access.
  3. Rotate passwords regularly: Update passwords every 90 days, or immediately if compromised.
    Consequence: Stale or reused passwords increase the likelihood of unauthorized access, especially if exposed in previous breaches
  4. Educate your team: Ensure all users recognize phishing attempts and report suspicious activity.
    Consequence: Untrained users are more likely to fall victim to social engineering, leading to credential theft and system compromise.

Maintaining strong password practices protects your business, your patients, and your reputation. Following these guidelines helps create a secure and trusted environment for everyone.

© 2025 Napa EA/MEDX, LLC. All rights reserved. https://vynedental.com/legal/