Stop passwords landing in ticket replies. Send a secure request from the ticket, and the password is destroyed when the ticket closes.
When a technician needs a user's password, it usually arrives in a ticket reply, an email or a chat message. It then sits in Freshservice's history, readable by anyone with access, long after the ticket is closed.

It takes about ten minutes and needs a Freshservice admin and SafeHanded's Team plan or above. The Freshservice setup guide in the docs has every step.
Start on the free plan and send your first request, or read how the encryption works first.