Live data from Hacker News

Ask HN: How do you manage passwords in teams?

news.ycombinator.com

31–40 of 69 posts

Re: Ask HN: How do you manage passwords in teams?

#33
The ideal is to avoid shared passwords on role accounts -- have individual user accounts with user-selected passwords (and ideally MFA), with the ability to then selectively upgrade access to role accounts.

I generally use 1Password standalone, but it's a bit weak for sharing.

Re: Ask HN: How do you manage passwords in teams?

#36
post #22

I researched this 3 years ago for our startups and couldn't find anything really good that lets me easily and securely share passwords on a need-to-know basis to team members and see who has access to what. Which baffles me because this is a problem that every single startup and small company must have. In the end, we went for https://www.passpack.com/ . They're clearly a small shop but it's been designed from the gr…

I've used passpack as part of a team and the workflow is pretty much spot on.

I have doubts about the security (cryptography in javascript) and the long-term prospects of such a small provider; I worry about them disappearing one day with all my passwords.

Re: Ask HN: How do you manage passwords in teams?

#37
post #9

Earlier quoted context omitted.

This is fine for things your organization controls. It isn't possible when dealing with lots of outsourced services. Too few services provide a way to hook into your LDAP or Active Directory.

True, but there still shouldn't be a shared password. Personal accounts for everyone. For the few truly top-level master accounts around, a printed password in the safe will do fine. It should be painful and feel dangerous to use those, because it is.

This isn't possible for every service. For example, our company Twitter account. Twitter doesn't allow any way for individuals to have their own passwords and post to the account. We have a social media team, all of whom need to be able to post to the Twitter account. There is no way around sharing a password for that (and it's just one example of many). It's great to be idealistic and say don't share passwords, but in the real world, it's not always possible.

Re: Ask HN: How do you manage passwords in teams?

#38
post #22

I researched this 3 years ago for our startups and couldn't find anything really good that lets me easily and securely share passwords on a need-to-know basis to team members and see who has access to what. Which baffles me because this is a problem that every single startup and small company must have. In the end, we went for https://www.passpack.com/ . They're clearly a small shop but it's been designed from the gr…

I've used passpack as part of a team and the workflow is pretty much spot on. I have doubts about the security (cryptography in javascript) and the long-term prospects of such a small provider; I worry about them disappearing one day with all my passwords.

They do offer export and backup

Re: Ask HN: How do you manage passwords in teams?

#39

You should first ask yourself why you have the shared password at all. Unless there is simply no other way, shared passwords and logins should be avoided for the obvious reasons. Next you need to document the procedure for resetting each of these passwords and accounts when an employee with access is fired or quits. Resetting the password needs to happen the minute the employee leaves the building. As for documenting…

rackspace, for example, doesn't support multiple user accounts.
Post reply on HN