i know some places uses 1password or similar, where users can then get access to certain shared passwords
and of course, save their own, which arent shared
Ask HN: How to store and share passwords in a company?
161–170 of 297 posts
Re: Ask HN: How to store and share passwords in a company?
#162Earlier quoted context omitted.
And when you set up 1Password, make sure you also get the CLI going, so passwords & shared gunk that's needed to access other people's services can be scripted, and when the passwords, etc get rotated no-one needs to know because no-one needs to store them.
[flagged]
I can't imagine what you'd have to have experienced to recommend Keeper over 1Password
Re: Ask HN: How to store and share passwords in a company?
#163We use Delinea Secret Server (formerly known as Thycotic Secret Server) for several years to store all credentials. No affiliate. I am user of the system and not an admin, so can't comment on the admin part, but for an end user it works very well. We are consultancy and we use it to store all credentials to our clients systems. You access through a web interface. Had made my life easy when it comes to managment of my…
Same - my last couple of companies have used Thycotic/Delinea (self-hosted) and it seems fine from a user perspective.
For a small company you could probably use self-hosted Bitwarden - I use that for my family but I imagine it'd get pretty annoying after a certain number of users.
Re: Ask HN: How to store and share passwords in a company?
#164Earlier quoted context omitted.
That is the answer. SSO, then password manager. I'd strongly recommend bitwarden, having deployed and managed it. I would warn against lastpass, strongly, due to papercut level issues everywhere. I haven't used 1password in an appropriate scenario to comment on it.
Except the search function of bitwarden is totally broken. Searching for A B shows everything with A or B, not even with A and B at the top.
This could be a good first contribution to Bitwarden for me or anyone really.
Do you mean the browser extension search feature?
Thanks for pointing it out.
Re: Ask HN: How to store and share passwords in a company?
#165Earlier quoted context omitted.
And when you set up 1Password, make sure you also get the CLI going, so passwords & shared gunk that's needed to access other people's services can be scripted, and when the passwords, etc get rotated no-one needs to know because no-one needs to store them.
[flagged]
It's actually not and is arguably the leader in password managers. Full stop. You should elaborate your future comments a bit more.
Re: Ask HN: How to store and share passwords in a company?
#166You generally want to minimize the number of passwords you manage; for instance, you should generally be paying the SSO tax and getting as many services as you can onto OIDC. After that, just do the cloud version of 1Password, which is easy to audit and manage access for, which you'll thank yourself for when it comes time to SOC2. Remember, as you give people access to passwords, that those passwords will need to be…
Unfortunately the SSO tax isn’t the worst. Most companies pay for it anyway.
In my experience (as in IC), the real issue is when the company don’t want to pay enough seats for everyone.
Honestly sometimes it makes sense when you don’t use the tool everyday but it’s a PITA.
I think, maybe, that SaaS companies should reflect on a (capped) per-day billing for those accounts.
Re: Ask HN: How to store and share passwords in a company?
#167On-premise version of Passwordstate. The even have a free 5 user license to trial it out. Integrates pretty well with your browser via a plugin and has a gazillion options. Permissions to passwords can be set at the individual passwords. And no I don't work for Passwordstate, just another satisfied customer.
Re: Ask HN: How to store and share passwords in a company?
#168write it on a page an pass on
Re: Ask HN: How to store and share passwords in a company?
#169write it on a page and pass on /s
Re: Ask HN: How to store and share passwords in a company?
#170Earlier quoted context omitted.
That is the answer. SSO, then password manager. I'd strongly recommend bitwarden, having deployed and managed it. I would warn against lastpass, strongly, due to papercut level issues everywhere. I haven't used 1password in an appropriate scenario to comment on it.
Except the search function of bitwarden is totally broken. Searching for A B shows everything with A or B, not even with A and B at the top.
There is a syntax you can use to search for entries that contain both A and B:
>+A +B
It is annoying but it works.