Ask HN: How do you manage passwords in teams? • Hacker News Board

Re: Ask HN: How do you manage passwords in teams?

#41

Post by mseebach » Mon, Oct 07, 2013, 1:59 PM UTC

zippergz wrote: post #37

mseebach wrote: post #16

Earlier quoted context omitted.

True, but there still shouldn't be a shared password. Personal accounts for everyone. For the few truly top-level master accounts around, a printed password in the safe will do fine. It should be painful and feel dangerous to use those, because it is.

This isn't possible for every service. For example, our company Twitter account. Twitter doesn't allow any way for individuals to have their own passwords and post to the account. We have a social media team, all of whom need to be able to post to the Twitter account. There is no way around sharing a password for that (and it's just one example of many). It's great to be idealistic and say don't share passwords, but…

A 30 second Google turns up at least two third-party services that lets you delegate access to your Twitter account without sharing the password.

Re: Ask HN: How do you manage passwords in teams?

#42

Post by dan_sim » Mon, Oct 07, 2013, 2:00 PM UTC

Someone I know is working on that open-source project : http://sflvault.org/

It's from "Savoir Faire Linux", a consultant shop that implements Linux solutions in various enterprises.

Re: Ask HN: How do you manage passwords in teams?

#43

Post by ipmb » Mon, Oct 07, 2013, 2:04 PM UTC

We GPG encrypt them and put them in Dropbox. Kip is used to handle encryption/decryption: https://github.com/grahamking/kip#readme

Re: Ask HN: How do you manage passwords in teams?

#44

Post by seanmcelroy » Mon, Oct 07, 2013, 2:05 PM UTC

Check out Secret Server by Thycotic. I implemented this at my work and it turned out to be a great turnkey solution.

Re: Ask HN: How do you manage passwords in teams?

#45

Post by bluedino » Mon, Oct 07, 2013, 2:16 PM UTC

doki_pen wrote: post #39

daigoba66 wrote: post #18

You should first ask yourself why you have the shared password at all. Unless there is simply no other way, shared passwords and logins should be avoided for the obvious reasons. Next you need to document the procedure for resetting each of these passwords and accounts when an employee with access is fired or quits. Resetting the password needs to happen the minute the employee leaves the building. As for documenting…

rackspace, for example, doesn't support multiple user accounts.

For what? All the members of our team have a Rackspace login. We can all make tickets, reboot servers, etc.

Re: Ask HN: How do you manage passwords in teams?

#46

Post by robbfitzsimmons » Mon, Oct 07, 2013, 2:24 PM UTC

Just GPG on a text file, checked into a private Github repo.

It's actually a great excuse to give business and designer types an intro to Git / command line.

Re: Ask HN: How do you manage passwords in teams?

#47

Post by coldarchon » Mon, Oct 07, 2013, 2:31 PM UTC

KeePass

http://keepass.info/help/base/keys.html

Open source, multiple users, key files, can be restricted to windows user account. Most downloaded password database program on sourceforge.

Re: Ask HN: How do you manage passwords in teams?

#48

Post by vWil » Mon, Oct 07, 2013, 2:34 PM UTC

LastPass could be useful: https://helpdesk.lastpass.com/features/sharing/

Feature summary: https://addons.mozilla.org/en-US/firefox/addon/lastpass-pass...

Re: Ask HN: How do you manage passwords in teams?

#49

Post by gmuslera » Mon, Oct 07, 2013, 2:42 PM UTC

emilpalm wrote: post #3

I'v used a shared dropbox folder with a KeePassX instance in it with a shared password for that container. If needed we could just change the password on the KeePassX container and/or remove the access to dropbox.

Used the same approach, but with a google drive document instead of dropbox. But you can't skip updating all (or at least, most of the perimetral ones ) passwords when a employee leaves (unless you trust him even after he leaves). If he made a local copy of the Keypassx file (or even pasted every password in a document, to cover most of the other alternatives) removing access to dropbox or changing master password will not stop him to keep accessing the old passwords. And the same goes with certificates.

Re: Ask HN: How do you manage passwords in teams?

#50

Post by RossM » Mon, Oct 07, 2013, 2:42 PM UTC

bluedino wrote: post #45

doki_pen wrote: post #39

Earlier quoted context omitted.

rackspace, for example, doesn't support multiple user accounts.

For what? All the members of our team have a Rackspace login. We can all make tickets, reboot servers, etc.

We've only just found the user management link in account settings, how long has this been available?