Before a Proxy Password Enters the Team

A colleague pasted a proxy connection string into our team chat while asking for help with a New Zealand test. It included a password, and the message was later copied into a support ticket. We removed the visible text, but I am not comfortable assuming that deletion settled the issue. We still need an easy way to share working examples without exposing credentials. What would you change in the team’s process? I want something people can follow during a busy debugging session, when they are focused on a failed request and may overlook what the connection string contains.