Ask for a password from the Jira issue you're already working on. It's encrypted to a person, not a link, and destroyed when the ticket closes.
When a technician needs a password the user can't reset, it usually arrives in a Teams chat, an email or a comment on the Jira issue. It stays there, readable by anyone who can open that chat, mailbox or issue, long after the job is done.
Nothing links the password to the ticket, so nobody remembers to delete it. There's also no record of who saw it, which is what an auditor will ask for.

You need a Jira admin and a SafeHanded Owner or Admin on the Team plan or above. The Jira Service Management setup guide in the docs has every step.
Start on the free plan and send your first request, or read how the encryption works first.