Meldium -- https://www.meldium.com/
Ask HN: How do you manage passwords in teams?
51–60 of 69 posts
Re: Ask HN: How do you manage passwords in teams?
#52There are still a lot of service providers that don't support multiple user accounts per organization, so if you want to share admin privileges (a good idea for redundancy) you're forced to share credentials. We used LastPass [1] for the following reasons: 1. Works across multiple OS and device types. 2. Passwords can be either "shared" (used to auto-fill forms but not viewed) or "given". When we did a small layoff,…
> Passwords can be either "shared" (used to auto-fill forms but not viewed) or "given".
What's preventing someone from filling a password box and reading its value from memory? The fact that this is even a feature makes me suspicious about their security claims.
Re: Ask HN: How do you manage passwords in teams?
#53We all use 1Password; up until the new version it was a PITA to share passwords though. Tended to be a 'shout it out across the office' thing.
So we built a little hackday prototype to help out: http://shhare.io/ . Would love feedback!
Re: Ask HN: How do you manage passwords in teams?
#54The ideal is to avoid shared passwords on role accounts -- have individual user accounts with user-selected passwords (and ideally MFA), with the ability to then selectively upgrade access to role accounts. I generally use 1Password standalone, but it's a bit weak for sharing.
> I generally use 1Password standalone, but it's a bit weak for sharing.
1Password 4 introduces "Shared Vaults"
Re: Ask HN: How do you manage passwords in teams?
#55Boris from http://meldium.com (YC W13) here. We've built a solution to help teams do just this and our customers include companies like PagerDuty and Hipmunk. Ideally, you never have to share passwords as everyone on your team would have an individual login. Major cloud services like Google, Salesforce & co handle this well. However, there are still thousands of web apps out there that have yet to build a multi-user experience (it's a lot of work). Meldium allows you to bring all of these modes together: whether you want multiple people to access your team's Twitter account or you want to add/remove an employee from all your cloud services with one-click.
Unlike a lot of other password managers, you don't have to share a whole vault. You can choose exactly which applications various team-members should have access to. Even better, Meldium automatically logs users into their apps on Firefox and Chrome (more to come).
Re: Ask HN: How do you manage passwords in teams?
#56The ideal is to avoid shared passwords on role accounts -- have individual user accounts with user-selected passwords (and ideally MFA), with the ability to then selectively upgrade access to role accounts. I generally use 1Password standalone, but it's a bit weak for sharing.
> I generally use 1Password standalone, but it's a bit weak for sharing. 1Password 4 introduces "Shared Vaults"
Yeah, but not everyone I want to share with is on a 1Password supported platform, etc.
Re: Ask HN: How do you manage passwords in teams?
#57Earlier quoted context omitted.
For what? All the members of our team have a Rackspace login. We can all make tickets, reboot servers, etc.
We've only just found the user management link in account settings, how long has this been available?
A while - I added someone last year IIRC.
Re: Ask HN: How do you manage passwords in teams?
#58You should first ask yourself why you have the shared password at all. Unless there is simply no other way, shared passwords and logins should be avoided for the obvious reasons. Next you need to document the procedure for resetting each of these passwords and accounts when an employee with access is fired or quits. Resetting the password needs to happen the minute the employee leaves the building. As for documenting…
There are plenty of necessary sites that just don't let you have multiple accounts for management. I can think of a few but there are tons more - ebay and PayPal are the first two that come to mind. You also get into "concurrent licensing" issues - lots of companies make you pay for each "person" you have tied to the account (like an infrequently used fax number). Account sharing is a necessary evil - but the other comments you mentioned are dead on.
Re: Ask HN: How do you manage passwords in teams?
#59We use KeePass databases saved to a shared drive. We each know the password to that, and have the key file on our client machines. To access it remotely we must first VPN into the network.
We're just starting to look at AuthAnvil. Anyone have experience with this?
Re: Ask HN: How do you manage passwords in teams?
#60Use a password safe (sometimes called a vault)! A password safe is an encrypted database that allows you, and your team, to securely store and share passwords. Basically, it is a free piece of software that is cross platform (win, mac, linux), simply store it on a shared drive, and give your team access, they use a common password to access the safe, which holds the other passwords. Create multiple safes if you need segregation i.e. dev safe, sysadmin safe, network safe, etc. I have created a screencast about this @ http://sysadmincasts.com/episodes/7-why-you-should-use-a-pas...
p.s. please, please, please do NOT use a cloud based solution to store your passwords! These are your crown jewels, do not outsource this!