[dead]
Ask HN: How to store and share passwords in a company?
291–297 of 297 posts
Re: Ask HN: How to store and share passwords in a company?
#292Earlier quoted context omitted.
Agree. The trio of Okta + Bitwarden + AWS Secrets Manager covers most bases and has served us well. The SSO tax is real though, especially if you're a . Shout out to the few enlightened/kind SaaS peeps that don't do this (e.g. Windmill.dev) !
Consider updating https://sso.tax/
Or better ssotax.org which is already way ahead.
Re: Ask HN: How to store and share passwords in a company?
#293Earlier quoted context omitted.
That is the answer. SSO, then password manager. I'd strongly recommend bitwarden, having deployed and managed it. I would warn against lastpass, strongly, due to papercut level issues everywhere. I haven't used 1password in an appropriate scenario to comment on it.
> LastPass There was the time they lost customer data in a hack and then lots of customers data was exploited. https://en.m.wikipedia.org/wiki/LastPass
The thing about the LastPass Wikipedia article is that someone keeps editing it to reduce the number of really bad security issues LastPass has had over the years. You can Google almost any year, along with "lastpass security incident" and get results.
Nobody with the goal of security should be using LastPass. Nobody.
Re: Ask HN: How to store and share passwords in a company?
#294[dead]
Re: Ask HN: How to store and share passwords in a company?
#295[dead]
Re: Ask HN: How to store and share passwords in a company?
#296I can only say that using pass ( https://www.passwordstore.org/ ) is an absolute nightmare, in case anyone else is considering that It seems like perfect simplicity built on time-tested cryptography: store pgp-encrypted files in a git repository. We already had an internal git server and used PGP internally, it was the perfect marriage. The tool provides the common functions like selecting which colleagues to encrypt…
Strong disagree - I use pass and I love it. I switched from keepass and not looking back. I guess it's for personal use, never tried using it in a company.
Sure, I see what you like about it for personal use: nearly all downsides we ran into are sharing-related
Re: Ask HN: How to store and share passwords in a company?
#297[dead]