It depends. For my specific use case it was safer to post it on my blog. It would have been even better to have kept it a secret, but frankly it was a lot more fun than making a phone call to share the password and I think it is educational to. There is nothing at all theoretcial about this blog. It actually  served to overtly demonstrate a covert communications technique.

 

I hope you enjoy this short blog that demonstrates one way to use steganography. I plan on doing more blogs on the subject... perhaps on Webroot's own site.

 

http://randy-abrams.blogspot.com/2018/06/an-awesomely-good-bad-password.html

 

Cheers,

 

Randy