Live data from Hacker News

Passbolt: Self hostable, open source, password manager for teams

passbolt.com

1–10 of 101 posts

Re: Passbolt: Self hostable, open source, password manager for teams

#2
I feel like this is becoming a very crowded market. What sort of differentiation separates this service from the pack?

For my purchasing decision, I’d lean heavily on the probability the service will be there in 5 years (it’s obvious I’m getting older I guess), as the market seems pretty mature.

Re: Passbolt: Self hostable, open source, password manager for teams

#4
post #2

I feel like this is becoming a very crowded market. What sort of differentiation separates this service from the pack? For my purchasing decision, I’d lean heavily on the probability the service will be there in 5 years (it’s obvious I’m getting older I guess), as the market seems pretty mature.

I did a pretty thorough review of PassBolt a couple of years back when I was trying really hard to get a company to adopt it and give up their "we store our all of our passwords on a spreadsheet" approach.

I don't have my notes any more, but off the top of my head, the big points in favor were:

- Self-hostable. The tech guy in charge just resolutely would not use any hosted service, period. In his evaluation, trusting a centralized password management service was less secure than a spreadsheet in a Windows share.

- Low cost. Password management is integrated into some MSP products but these can be a bit pricey for small shops.

- Built with PHP. Same guy was uncomfortable with Python, Node, and all that, and insisted that he be able to maintain and troubleshoot the codebase himself if necessary, so it had to be PHP.

The main failing was that it didn't have proper mobile device support, so it would be a pain in the ass for some of the employees.

As far as I know that same company still keeps their passwords in a spreadsheet. They've had several costly security incidents over the years.

Re: Passbolt: Self hostable, open source, password manager for teams

#5
post #2

I feel like this is becoming a very crowded market. What sort of differentiation separates this service from the pack? For my purchasing decision, I’d lean heavily on the probability the service will be there in 5 years (it’s obvious I’m getting older I guess), as the market seems pretty mature.

I did a pretty thorough review of PassBolt a couple of years back when I was trying really hard to get a company to adopt it and give up their "we store our all of our passwords on a spreadsheet" approach. I don't have my notes any more, but off the top of my head, the big points in favor were: - Self-hostable. The tech guy in charge just resolutely would not use any hosted service, period. In his evaluation, trustin…

> As far as I know that same company still keeps their passwords in a spreadsheet. They've had several costly security incidents over the years.

Because of the password spreadsheet?

Re: Passbolt: Self hostable, open source, password manager for teams

#6
post #5

Earlier quoted context omitted.

I did a pretty thorough review of PassBolt a couple of years back when I was trying really hard to get a company to adopt it and give up their "we store our all of our passwords on a spreadsheet" approach. I don't have my notes any more, but off the top of my head, the big points in favor were: - Self-hostable. The tech guy in charge just resolutely would not use any hosted service, period. In his evaluation, trustin…

> As far as I know that same company still keeps their passwords in a spreadsheet. They've had several costly security incidents over the years. Because of the password spreadsheet?

Not directly, nah.

Re: Passbolt: Self hostable, open source, password manager for teams

#7
heh, i know a guy that will be having rage-fits of the use of "on-Premise" on their web site...

Premise:

noun /ˈprɛmɪs/ LOGIC a previous statement or proposition from which another is inferred or follows as a conclusion. "if the premise is true, then the conclusion must be true" verb /prɪˈmʌɪz/ base an argument, theory, or undertaking on. "the reforms were premised on our findings"

Premises:

noun a house or building, together with its land and outbuildings, occupied by a business or considered in an official context. "the company has moved to new premises"

Re: Passbolt: Self hostable, open source, password manager for teams

#8
My team has been using this for over a year. It's been my favorite answer for this problem-space. I love the self-hosted part (which means I also get backups I can trust). It's trivial to put inside a VPN for added security. It's security reviews were good and built on standard tools (so maybe if PB is dead I could recover outside?). Just save the key you download when you setup or your hosed!

Which reminds me, I've been meaning to make a plain-text archiver for this -- to print out secrets and put them in my safe.

Re: Passbolt: Self hostable, open source, password manager for teams

#9
Why would I pay at least 450 euro per month for something I have to run myself? I appreciate that support and maintenance costs are certainly something to pay for, but a high monthly charge when I'm taking all the risk, and paying for the hosting immediately turns me off.

Especially considering the 4 hour SLA on phone support for the enterprise version. If the password management system is down, work stops. I'd rather not have to break the glass on the emergency god account at all.

Re: Passbolt: Self hostable, open source, password manager for teams

#10

heh, i know a guy that will be having rage-fits of the use of "on-Premise" on their web site... Premise: noun /ˈprɛmɪs/ LOGIC a previous statement or proposition from which another is inferred or follows as a conclusion. "if the premise is true, then the conclusion must be true" verb /prɪˈmʌɪz/ base an argument, theory, or undertaking on. "the reforms were premised on our findings" Premises: noun a house or building,…

Hope you let the site operator know, or filed a bug on their github
Post reply on HN