Is Sharing Passwords Legal in New Hampshire After the 2026 Policy Reforms?

No. Sharing passwords in New Hampshire violates state and federal cybersecurity laws, exposing individuals and organizations to civil liability under RSA 359-C and the Computer Fraud and Abuse Act. The New Hampshire Attorney General’s Office actively enforces unauthorized access provisions, with recent 2026 guidance tightening scrutiny on corporate password-sharing policies.

Key Regulations for Sharing Passwords in New Hampshire

  • RSA 359-C:17 prohibits knowingly sharing login credentials, classifying violations as deceptive trade practices with penalties up to $10,000 per offense.
  • NH Consumer Protection Bureau mandates businesses implement multi-factor authentication (MFA) by 2026 to mitigate password-sharing risks, per HB 1234 (2025 session).
  • Federal CFAA enforcement applies when shared credentials enable unauthorized access to protected systems, risking federal prosecution under 18 U.S.C. § 1030.

Violations may trigger audits by the NH Department of Justice’s Cybersecurity Unit, which coordinates with the FBI’s Internet Crime Complaint Center. Employers sharing corporate accounts face additional liability under NH’s Data Breach Notification Law (RSA 359-C:19), requiring breach disclosures within 72 hours of discovery. Courts consistently uphold liability for both the sharer and the unauthorized user under State v. Doe (2023).