A grants-office researcher reuses the city's email password on a sock-puppet account. What uniqueness rule should they follow?
Select an answer to reveal the explanation.
Short Explanation
Same password on the sock puppet and the city inbox is one key for the front door and the fake mustache. If the persona leaks, the mailbox goes with it. Unique secrets keep a burned research account from opening municipal email.
Full Explanation
Credential uniqueness is a core OPSEC control. Research-account compromise should not unlock municipal email or other civic systems. Reuse, truncated variants of the civic password, and publishing the secret in a public FAQ all couple the persona to production identity. A unique password and a separate recovery path contain the blast radius if the sock puppet is phished, dumped, or banned.