ABA password skills can support an account owner in using a password manager, creating unique credentials, completing accessible multifactor authentication, storing recovery information safely, and getting help without exposing secrets. Teaching should use fictional credentials. Clinicians and support staff should never collect, retain, or ask the person to reveal real passwords, PINs, one-time codes, or recovery answers.
Start with account ownership
Identify the account owner, authorized users, device, recovery contact, organization rules, and which supporter may help. Separate assistance with access from permission to read the account's content or act as the owner.
Use current security guidance
CISA's Secure Our World recommends strong unique passwords, password managers, multifactor authentication, phishing awareness, and software updates. It defines MFA as using more than a password to access an account. Choose the strongest accessible option the service supports.
Design an accessible routine
Check password-manager access, device unlocking, screen reader, motor demands, security-key handling, authenticator prompts, time limits, backup codes, trusted recovery, device replacement, and what happens when a factor is lost.
Protect secrets during teaching
The Ethics Code addresses confidentiality, competence, client involvement, and risk. ASHA supports AAC access. Use demonstration accounts or fictional values and let the owner enter real credentials privately.
A practical example
Luis reviews six accounts with permission. Password-manager access and a usable second factor are ready for five. Luis completes four privately and routes one recovery issue to the account provider. No real credentials enter the teaching record.
Questions families can use
Who owns the account? Which supporter is authorized? Is the password unique and managed securely? Which MFA method is accessible? What recovery route applies? Can practice occur without exposing a real secret?
Sources
- Council of Autism Service Providers, ABA Practice Guidelines Version 3.0 public summary
- Behavior Analyst Certification Board, Ethics Code for Behavior Analysts
- American Speech-Language-Hearing Association, Augmentative and Alternative Communication
- Cybersecurity and Infrastructure Security Agency, Secure Our World
Finni resources
