Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Passbolt: Self hostable, open source, password manager for teams

passbolt.com

Post reply on HN
Print view View original

11–20 of 101 posts

Re: Passbolt: Self hostable, open source, password manager for teams

#11

Post by latchkey »

edoceo wrote: post #8

My team has been using this for over a year. It's been my favorite answer for this problem-space. I love the self-hosted part (which means I also get backups I can trust). It's trivial to put inside a VPN for added security. It's security reviews were good and built on standard tools (so maybe if PB is dead I could recover outside?). Just save the key you download when you setup or your hosed! Which reminds me, I've…

imho, https://www.deadmansswitch.net/ is a better option than paper in a safe.

your house could burn down or someone might not be able to open your safe (easily).

pgp encrypt a message that gets sent to someone with instructions for how to access your things if you don't check in.

Re: Passbolt: Self hostable, open source, password manager for teams

#12

Post by edoceo »

latchkey wrote: post #11
edoceo wrote: post #8

My team has been using this for over a year. It's been my favorite answer for this problem-space. I love the self-hosted part (which means I also get backups I can trust). It's trivial to put inside a VPN for added security. It's security reviews were good and built on standard tools (so maybe if PB is dead I could recover outside?). Just save the key you download when you setup or your hosed! Which reminds me, I've…

imho, https://www.deadmansswitch.net/ is a better option than paper in a safe. your house could burn down or someone might not be able to open your safe (easily). pgp encrypt a message that gets sent to someone with instructions for how to access your things if you don't check in.

I hear you; I've got three copies, two physically distant safes, and a deposit-box -- it's a habit I got doing SysOps for a bank back in the day.

Re: Passbolt: Self hostable, open source, password manager for teams

#14

Post by ahnick »

As a small dev team we needed something similar to passbolt, but that would primarily be used for sharing API keys and other application secrets for our code base. (Although we use it for other passwords as well) A lot of the existing tools are fairly complex to setup and are not tied to identity management systems. (i.e. You have to setup and maintain separate user accounts)

Since, we were on Keybase already for employee identity and chat, we created an extension to encpass.sh to use Keybase for our secret storage. (https://github.com/plyint/encpass.sh/blob/master/extensions/...) It has been working really well so far, as when we add someone to a Keybase team, that person immediately has access to that team's secrets. No extra setup required.

Re: Passbolt: Self hostable, open source, password manager for teams

#15

Post by paulryanrogers »

lexicon0 wrote: post #9

Why would I pay at least 450 euro per month for something I have to run myself? I appreciate that support and maintenance costs are certainly something to pay for, but a high monthly charge when I'm taking all the risk, and paying for the hosting immediately turns me off. Especially considering the 4 hour SLA on phone support for the enterprise version. If the password management system is down, work stops. I'd rathe…

Have you considered Bitwarden?

Re: Passbolt: Self hostable, open source, password manager for teams

#16

Post by verandaguy »

I like this a lot. I've been a Bitwarden user for the past few months and I'm not looking back, but I'm so happy there's reasonable competition:

- It's still OSS, so you can self-host, which is a big selling point for me

- There's a managed/hosted option, which is a big selling point for probably most users

- It's got a browser plugin à la BitWarden/1Password, which is a crucial feature for any well-polished password manager (and hopefully it also comes with Android autofill integration)

Hopefully Passbolt, BitWarden and others can keep eachother on their toes and help this be an innovative and widely accessible space!

Expanding on that last point: I'm a huge fan of the general idea of having the option of self-hosting with a business model revolving around a paid, managed option, for password managers or otherwise.

Re: Passbolt: Self hostable, open source, password manager for teams

#18

Post by smartbit »

Pros

  - free open source
  - group management can be delegated
  - works fine with mac, linux & windows browsers
  - maintenance free self hosted on k8s for 2 years
  - lack of mobile apps has not been issue
  - UX is ok, no complaints
  - requires little end-user support
Cons

  - only password field is encrypted
  - no warning that Notes are not encrypted 
  - promises ‘Secure files & notes (Coming soon)’
    for more than year
  - password generator has no complexity options
  - requires browser plugin
  - user passwords have no minimum entropy requirements
  - no helm chart, used our own
Experience based on free version with ~75 users. Plan to switch to paid version when Secure files & notes become available.

Noticed that former lead developer https://github.com/markstory now works on Sentry. Sentry has same list of Pros as above: it ’just works’ without maintenance or support, running self hosted on k8s for free.

Re: Passbolt: Self hostable, open source, password manager for teams

#19

Post by toomanymike »

edoceo wrote: post #12
latchkey wrote: post #11

Earlier quoted context omitted.

imho, https://www.deadmansswitch.net/ is a better option than paper in a safe. your house could burn down or someone might not be able to open your safe (easily). pgp encrypt a message that gets sent to someone with instructions for how to access your things if you don't check in.

I hear you; I've got three copies, two physically distant safes, and a deposit-box -- it's a habit I got doing SysOps for a bank back in the day.

Be careful with safety deposit boxes - https://www.nytimes.com/2019/07/19/business/safe-deposit-box...

Re: Passbolt: Self hostable, open source, password manager for teams

#20

Post by elric »

smartbit wrote: post #18

Pros - free open source - group management can be delegated - works fine with mac, linux & windows browsers - maintenance free self hosted on k8s for 2 years - lack of mobile apps has not been issue - UX is ok, no complaints - requires little end-user support Cons - only password field is encrypted - no warning that Notes are not encrypted - promises ‘Secure files & notes (Coming soon)’ for more than year - password…

More like "fauxpensource". All the useful features are part of the expensive looking Business plan. I don't mind people charging money for software, but I really wish they wouldn't pretend to be open source when they're not.
Post reply on HN