Do Not Save Session Passwords
Rationale
Passwords for sessions should not be stored on the endpoint device.
Instructions
->When configuring a session, on the login page, leave the Password field empty. The user will then be prompted interactively for the password.
->Wherever possible use Two-Factor Authentication (2FA).