SeaDragonTattoo, I am sorry to hear about your job. That really sucks.
Regarding the passwords for your accounts, I would do the following:
-
In your browser, turn off the Password Memorization feature.
-
In your browser, remove all stored passwords (or at least just the passwords for your drug-ordering sites).
-
Go into each drug-ordering site and change your password. Upthread, some people mentioned password managers. If you don’t use one of those, you might try something like what I do. Following “Best Practices”, I don’t use the same password for each site. However, many of my passwords are a combination of an acronym for the website plus a “base phrase”. For example, my Straight Dope password might be “sd!FooBarrgh”, and my Yahoo Mail password might be “ym!FooBarrgh”. (No, those are not my real passwords and those are not my real password patterns, they are just examples.) The advantage of this pattern is that it creates strong passwords that are easy to remember.
-
When you change the password for a site, uncheck the “Remember me” option so that you have to enter the password each time you log in or at least after each time your browser has been closed completely. I know, it is a PITA, but if you followed something like what I described in #3, it isn’t that big of a PITA.
-
For each of your drug-ordering sites, search around for a tech support email address and save them somewhere. If you do decide to leave, you might be able to send them an email telling them you no longer need that account and to disable it. (Alternatively, you may be able to lock yourself out of each account by entering an incorrect password three or more times.)
-
From the drug-ordering company’s perspective, it is generally a violation of the Terms of Service for a user to share an account, and particularly if the account is tied to you directly and not to your company. In other words, if you are leaving and your employer requests your account name and password (and the account is tied directly to you), your company may be in violation of the websites Terms of Service. You may need to review the Terms for each of your websites.
You could even volunteer to help your employer set up new accounts for your replacement, if you have a mind to do that.
- If you are forced to turn over your credentials for the drug-ordering sites, I would demand that your employer log into each account and change the password to something you do not know, and do it immediately while you are watching. (Obviously, don’t watch them enter the password, just watch them change it.) You need to protect yourself so that someone doesn’t order drugs inappropriately using your account login and have them claim it was you. If you do not have access to the account, you minimize the possibility that someone will blame you. You can spin this entirely as “protecting your employer” since your employer is now assured that you do not have access to the accounts and cannot order drugs and have them shipped somewhere other than your employer’s office.
The above steps should be enough to minimize the possibility that someone will misuse your account information. If you want to discuss this further privately, please feel free to PM me.