I have Bitwarden Enterprise deployed and authenticate via our IDP. It's been working well for us, each team has their own collection that they manage. From an IT admin perspective, it's pretty hands off. Any changes to password are automatically synced between users.
Ask HN: How to store and share passwords in a company?
91–100 of 297 posts
Re: Ask HN: How to store and share passwords in a company?
#92We always used 1Password[0]. We still use it in the open-source projects that I work with. I have heard that LastPass is about as good, but have no experience using it. The latest version of 1Password isn't so good, but it works fine. [0] https://1password.com
> I have heard that LastPass is about as good
I am shocked how you could've possibly heard this. Basically everything I've heard rounds to "LastPass is the worst available option" and "1Password is the best available option." I use neither.
Re: Ask HN: How to store and share passwords in a company?
#93Reduce the number of passwords the user needs via SSO.
Be absolutely strict on password sharing via non approved means.
Bitwarden enterprise for whatever is left, with collections per team/department.
Re: Ask HN: How to store and share passwords in a company?
#94I use LastPass, and know that they have been breached before. I am in a smaller company, and force strong master passwords, as well as monitor password security. Assuming that LastPass is not the solution I should use, is there a simple way to migrate to another service such as 1Password? I see people mention the UI being difficult for LastPass, but I do not find this to be true, and it makes a lot of sense to me from a security standpoint. I have specific groups, and use shared folders with group and/or user permissions.
Any help/advice would be greatly appreciated, and thank you in advance.
Re: Ask HN: How to store and share passwords in a company?
#95We always used 1Password[0]. We still use it in the open-source projects that I work with. I have heard that LastPass is about as good, but have no experience using it. The latest version of 1Password isn't so good, but it works fine. [0] https://1password.com
Have also used 1password. It's great. It has an API that you can code against for automation, and you can also mirror some passwords / tokens into hashicorp vault.
Re: Ask HN: How to store and share passwords in a company?
#96Best to use SSO for SaaS passwords. This is where your whole team has a Microsoft or Google (or other identity provider) login administered centrally by the company that is further used to authenticate to various services.
As opposed to "login with Facebook etc." logins that are individually administered by each end user for each app.
This is low fruit for many things but often companies require you to be on an expensive SaaS pricing tier to use SSO on their product.
Next problem to solve is Software Engineer's cloud secrets. Use key vaults in your cloud for this. Use SSO to authenticate your team to that cloud.
Enable 2fa as much as possible. TOTP not SMS.
Finally you will need people to save passwords for some stuff. Lastpass or Bitwarden etc.
Avoid shared passwords. Sometimes unavoidable in which case rotate them often and when people leave too.
Re: Ask HN: How to store and share passwords in a company?
#97Most services are connected through SSO, so those won't have passwords and are automatically shut down when the user leaves the company. All employees also have a 1password account for which we can store individual passwords for the services that are not connected through SSO. For some services we only have a single token/service account which we need to share within the team. Often they were stored in a `.env` file,…
Thanks for this comment. I currently use direnv with great success for managing virtual environments (mostly various language versions, dependencies, and environment variables). I'll look into this approach of pulling in credentials for those environments from a password store.
I think direnv is a highly underrated tool. Switching between environments with a simple 'cd' is of huge benefit to my development experience.
Re: Ask HN: How to store and share passwords in a company?
#98You might want to take a look at Infisical (https://infisical.com)
Re: Ask HN: How to store and share passwords in a company?
#99We always used 1Password[0]. We still use it in the open-source projects that I work with. I have heard that LastPass is about as good, but have no experience using it. The latest version of 1Password isn't so good, but it works fine. [0] https://1password.com
> I have heard that LastPass is about as good I am shocked how you could've possibly heard this. Basically everything I've heard rounds to "LastPass is the worst available option" and "1Password is the best available option." I use neither.
[deleted]
Re: Ask HN: How to store and share passwords in a company?
#100We always used 1Password[0]. We still use it in the open-source projects that I work with. I have heard that LastPass is about as good, but have no experience using it. The latest version of 1Password isn't so good, but it works fine. [0] https://1password.com
1Password is the way to go for service accounts shared by admins. Not sure if OP is talking about users though. In that case, should definitely pick an SSO solution for as many services as possible.