I got pulled up on my password policy yesterday; I don't tell other people my passwords. The context was arranging that a friend could use my laptop while I was away at work - instead of telling her my login details so she could use that I created a new account. This provoked a "Don't you trust me?" response. I couldn't quite manage to successfully articulate the fact that I did trust her, I was aware that unsupervised physical access meant that it was easy enough to gain access anyway but that I just wouldn't hand over my password. It's not like there's anything confidential or that isn't backed up on there. The password is for that machine only. My GPG key doesn't live on it, so the biggest effort if it was attacked would be rolling the SSH key (that has a passphrase, of course) for that machine. And yet I couldn't bring myself to do it. This is nothing unique to this instance; I spent 13 years with Katherine and she never knew my passwords nor had root access to any of my machines. I can imagine situations where I'd share root, but even then I wouldn't share my personal password.
Do I come across as untrusting, or is anyone else like this too?
(In the interest of full disclosure I have actually handed over my password [more accurately, changed it temporarily to something else] to someone in a work context, but it was really, really hard for me to bite my tongue and not respond with a curt "Shouldn't you be able to gain the appropriate access as you are part of IT anyway?".)