Is Sharing Passwords Legal in New Mexico After the 2026 Policy Reforms?

No. Sharing passwords in New Mexico is generally illegal under state and federal laws, with limited exceptions for authorized access. The New Mexico Computer Crimes Act (NMSA §30-45-1 et seq.) and the federal Computer Fraud and Abuse Act (CFAA) criminalize unauthorized access to computer systems, which includes password sharing without consent. Recent 2026 amendments to the state’s cybersecurity regulations (N.M. Admin. Code §19.30.1) further restrict such practices, particularly in government and critical infrastructure sectors.

Key Regulations for Sharing Passwords in New Mexico

  • New Mexico Computer Crimes Act (NMSA §30-45-3): Prohibits knowingly accessing a computer, network, or data without authorization, including through shared credentials. Violations may result in felony charges, fines up to $10,000, and imprisonment for up to 18 months.
  • Federal CFAA (18 U.S.C. §1030): Criminalizes unauthorized access to protected computers, with penalties including fines and imprisonment up to 10 years for aggravated offenses. Shared passwords may be deemed unauthorized if access exceeds the sharer’s granted permissions.
  • 2026 State Cybersecurity Compliance Shifts: The New Mexico Department of Information Technology (DoIT) now mandates multi-factor authentication (MFA) for all state employees and contractors, effectively banning password sharing in government systems. Non-compliance risks contract termination and civil penalties under the 2026 Cybersecurity Enhancement Act.

Exceptions exist for household members sharing personal accounts (e.g., streaming services) or employers explicitly permitting password sharing under controlled environments. However, these exemptions are narrowly construed and do not extend to business or government systems. Organizations must document authorized access policies to mitigate legal exposure.