diff --git a/best_practices.md b/best_practices.md
index 5b2385a..82b58c2 100644
--- a/best_practices.md
+++ b/best_practices.md
@@ -6,3 +6,15 @@ to protect ourselves as an organization from external threats.
 
 This document is maintained by the Infrastructure Committee. Any
 change to this document should be announced to the collective body.
+
+## Infrastructure Login Credentials & Authentication Information.
+
+The login credentials and other operating information (security
+questions, recovery passphrases, etc) for
+[core infrastructure](core_infrastructure.md), social media accounts,
+and other systems associated with the Collective should be stored in
+the Collective password manager vault tracked in the
+[infrastructure](intrusive/infrastructure) repository.
+
+Such information should not be stored or recorded in any form or place
+other than the Collective password manager vault.