Passbolt: Self hostable, open source, password manager for teams • Hacker News Board

Re: Passbolt: Self hostable, open source, password manager for teams

#31

Post by mattashii » Wed, Jul 15, 2020, 8:00 AM UTC

lexicon0 wrote: post #9

Why would I pay at least 450 euro per month for something I have to run myself? I appreciate that support and maintenance costs are certainly something to pay for, but a high monthly charge when I'm taking all the risk, and paying for the hosting immediately turns me off. Especially considering the 4 hour SLA on phone support for the enterprise version. If the password management system is down, work stops. I'd rathe…

> at least 450 euro /month

As I see it, the pricing starts at 9/month for 5 users, or free?

Re: Passbolt: Self hostable, open source, password manager for teams

#32

Post by remy_ » Wed, Jul 15, 2020, 8:06 AM UTC

elric wrote: post #20

smartbit wrote: post #18

Pros - free open source - group management can be delegated - works fine with mac, linux & windows browsers - maintenance free self hosted on k8s for 2 years - lack of mobile apps has not been issue - UX is ok, no complaints - requires little end-user support Cons - only password field is encrypted - no warning that Notes are not encrypted - promises ‘Secure files & notes (Coming soon)’ for more than year - password…

More like "fauxpensource". All the useful features are part of the expensive looking Business plan. I don't mind people charging money for software, but I really wish they wouldn't pretend to be open source when they're not.

The paid version is also distributed under Open Source license, but is not free (as in free beer).

Re: Passbolt: Self hostable, open source, password manager for teams

#33

Post by tazeg95 » Wed, Jul 15, 2020, 8:10 AM UTC

You just need git, ssh and pass (https://www.passwordstore.org/), see https://fr.jeffprod.com/blog/2019/gerez-vos-mots-de-passe-av... (french)

Re: Passbolt: Self hostable, open source, password manager for teams

#34

Post by amelius » Wed, Jul 15, 2020, 8:12 AM UTC

Does "for teams" mean that passwords can be shared?

And is password sharing a good idea to begin with?

Re: Passbolt: Self hostable, open source, password manager for teams

#35

Post by remy_ » Wed, Jul 15, 2020, 8:12 AM UTC

todotask wrote: post #17

I like to evaluate this, however, I'm curious what was the Passbolt's tasty recipe for building on top of CakePHP web framework?

Hi passbolt developer here, the reason for building on top of CakePHP was mostly: - it's been audited multiple time (last in date was by Cure53, financed by mozilla foundation) - convention over configuration - good versatility for hosting (= less support) - lovely community (less big but very friendly)

Re: Passbolt: Self hostable, open source, password manager for teams

#36

Post by elygre » Wed, Jul 15, 2020, 8:52 AM UTC

amelius wrote: post #34

Does "for teams" mean that passwords can be shared? And is password sharing a good idea to begin with?

Password sharing is not a good idea, but sometimes or even often unavoidable.

Re: Passbolt: Self hostable, open source, password manager for teams

#37

Post by ratchetclank » Wed, Jul 15, 2020, 8:56 AM UTC

We have been considering it in our team but the lack of capability of creating a "shared vault" and connecting it to a centralised AD/LDAP identity was a no go for us. Also, the lack, due to the tech itself, of a recovery method for users and administrator (with audit of course) was a big disapointment. PS : never connect it to your AD/ldap or it will spam everyone in your organisation by default ! #lessonlearned

Re: Passbolt: Self hostable, open source, password manager for teams

#38

Post by dewey » Wed, Jul 15, 2020, 9:28 AM UTC

tazeg95 wrote: post #33

You just need git, ssh and pass ( https://www.passwordstore.org/ ), see https://fr.jeffprod.com/blog/2019/gerez-vos-mots-de-passe-av... (french)

Or https://github.com/gopasspw/gopass if you want something passwordstore compatible but with additional team features.

Re: Passbolt: Self hostable, open source, password manager for teams

#39

Post by Tepix » Wed, Jul 15, 2020, 9:42 AM UTC

smartbit wrote: post #18

Pros - free open source - group management can be delegated - works fine with mac, linux & windows browsers - maintenance free self hosted on k8s for 2 years - lack of mobile apps has not been issue - UX is ok, no complaints - requires little end-user support Cons - only password field is encrypted - no warning that Notes are not encrypted - promises ‘Secure files & notes (Coming soon)’ for more than year - password…

> - lack of mobile apps has not been issue

Why hasn't it been an issue? How do I access my passwords with Passbolt on my mobile device when I'm offline?

Re: Passbolt: Self hostable, open source, password manager for teams

#40

Post by pricechild » Wed, Jul 15, 2020, 9:45 AM UTC

dmacedo wrote: post #25

verandaguy wrote: post #16

I like this a lot. I've been a Bitwarden user for the past few months and I'm not looking back, but I'm so happy there's reasonable competition: - It's still OSS, so you can self-host, which is a big selling point for me - There's a managed/hosted option, which is a big selling point for probably most users - It's got a browser plugin à la BitWarden/1Password, which is a crucial feature for any well-polished password…

Likewise, and I'm loving Bitwarden so far! Although I'm using the dockerized rust API (1) for self-hosting it, and so far it's been working great for months! I am keeping a close eye on the container, and backing up the data hourly to ensure I don't need to worry about loosing anything. (1): https://github.com/dani-garcia/bitwarden_rs

Also a massive fan of this project - seems a no brainier compared to the original for personal use.

My big recommendation is to backup the binary at the same time as your sql backup.

They've got a github sponsors link too FWIW.