A company I was a contractor for would send payment invoices with a password. The password was the last four digits of the ID number specific to the contractor. Our CRM we all used had every contractors ID number in their profile publicly available. When I asked what the point was I was told upper management required a password and this was the easiest.