best_practices.md

@@ -6,3 +6,15 @@ to protect ourselves as an organization from external threats.
 
 This document is maintained by the Infrastructure Committee. Any
 change to this document should be announced to the collective body.
+
+## Infrastructure Login Credentials & Authentication Information.
+
+The login credentials and other operating information (security
+questions, recovery passphrases, etc) for
+[core infrastructure](core_infrastructure.md), social media accounts,
+and other systems associated with the Collective should be stored in
+the Collective password manager vault tracked in the
+[infrastructure](intrusive/infrastructure) repository.
+
+Such information should not be stored or recorded in any form or place
+other than the Collective password manager vault.