At our company, we use our own solution: "nCryptedCloud" (http://ncryptedcloud.com), client-side encryption software that secures your files before they go into the cloud (Dropbox). We don't keep the data, just the knowledge how to open that data (key). We don't even have a link between the file and the key, the file contains the key's information. This way, using dropbox shared folder, you can manage a secure sharing experience that allows you to revoke access to anyone in the future. It's free. Check it out and let me know if you have any question :)
Ask HN: How do you manage passwords in teams?
61–69 of 69 posts
Re: Ask HN: How do you manage passwords in teams?
#62Personal.com has a solution for this. It is cloud-based, with strong crypto and no need/motivation to see your data = secure. Secure Share is built-in and allows each team member to manage the passwords they are responsible for and share them with exactly the individuals that need access to them. Access can be revoked allowing you to revoke/change password on a regular basis, or as needed.
Re: Ask HN: How do you manage passwords in teams?
#63We use SimpleSafe (https://www.simplesafe.net/) which is self-hosted and pretty simple to set up.
Re: Ask HN: How do you manage passwords in teams?
#64Use a password safe (sometimes called a vault)! A password safe is an encrypted database that allows you, and your team, to securely store and share passwords. Basically, it is a free piece of software that is cross platform (win, mac, linux), simply store it on a shared drive, and give your team access, they use a common password to access the safe, which holds the other passwords. Create multiple safes if you need…
The problem with this solution is that there's no real authorisation or role model built in. For example, if an employee leaves the company, you will have to change the password safe's password, and almost nobody does that. It's also trivially easy for anyone to copy the complete database at any point of time.
So yeah, it's better than an Excel sheet, but there remain unsolved problems.
Re: Ask HN: How do you manage passwords in teams?
#651Password because life's too short to use LastPass. There's no good way to share the passwords though... unlogged chat / IM / onetimesecret.com
There's a sharing feature (multiple vaults) in the new 1Password 4 for Mac—but it hasn’t yet migrated to any of the other versions (including 1Password 4 for iOS).
Re: Ask HN: How do you manage passwords in teams?
#66Earlier quoted context omitted.
I've used passpack as part of a team and the workflow is pretty much spot on. I have doubts about the security (cryptography in javascript) and the long-term prospects of such a small provider; I worry about them disappearing one day with all my passwords.
They do offer export and backup
We use Passpack.com for 10+ people and have a routine policy of backing everything up (in encrypted form) on several USB sticks regularly.
It's a nice service, although the UI/UX could be polished and simplified. We haven't switched away.
Re: Ask HN: How do you manage passwords in teams?
#671Password because life's too short to use LastPass. There's no good way to share the passwords though... unlogged chat / IM / onetimesecret.com
There's a sharing feature (multiple vaults) in the new 1Password 4 for Mac—but it hasn’t yet migrated to any of the other versions (including 1Password 4 for iOS).
Haven't tried it yet. But the key would be sharing individual passwords with the right people - not just having a shared vault where it's all or nothing.
Re: Ask HN: How do you manage passwords in teams?
#68We use http://teampassword.com/, no fuss, fantastic customer support and a pretty UI.
Re: Ask HN: How do you manage passwords in teams?
#69There are still a lot of service providers that don't support multiple user accounts per organization, so if you want to share admin privileges (a good idea for redundancy) you're forced to share credentials. We used LastPass [1] for the following reasons: 1. Works across multiple OS and device types. 2. Passwords can be either "shared" (used to auto-fill forms but not viewed) or "given". When we did a small layoff,…
> Passwords can be either "shared" (used to auto-fill forms but not viewed) or "given". What's preventing someone from filling a password box and reading its value from memory? The fact that this is even a feature makes me suspicious about their security claims.
Lastpass acknowledges this and tells you that a shared password can be retrieved, but for most employees, it would be more work than it is probably worth to view that password. Also, as another commenter pointed out, as soon as a employee leaves the company, Lastpass makes it VERY easy for one person to change the passwords and everyone with access gets their version updated automatically.