How to secure password from developers

[SJWhiteley]

Not to production they don't, well only a select few had prod access. For dev, QA and UAT all data had to be scrubed so that no identifying data was left in the database.

Ah, that makes sense. However, how is a dev supposed to work on a database where you are not dealing with 'real' data? I've never been in a situation like that. However, is that the situation here?

I agree with Gary - they should only touch a database that has been de-personalized.

But this would mean a replicated - but sanitized - database, wouldn't it? In which case, having the pswd to that db wouldn't matter.