Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Passbolt: Self hostable, open source, password manager for teams

passbolt.com

Post reply on HN
Print view View original

41–50 of 101 posts

Re: Passbolt: Self hostable, open source, password manager for teams

#41

Post by 8fingerlouie »

sdan wrote: post #22

pass[0] has been the best of everything so far. gpg based and easy to use with keyboard shortcuts. i like alternatives like htis, but pass is super barebones and highly available. [0]: https://www.passwordstore.org/

I use this, and it has been nothing but great.

I switched from 1Password when all the subscription nonsense started, and while 1Password has (much) better integration in various systems (desktops and mobile), Pass does what it says, and it does it well.

I (briefly) evaluated Bitwarden, but the lack of support for storing 2FA tokens without a subscription threw me off. I'm aware of bitwarden_rs, which presumably supports 2FA tokens, but i've not yet had time to experiment with it. Besides, hosting a git repository is not exactly rocket science, and it's a much simpler setup compared to Bitwarden with database and server parts that needs to be running.

Re: Passbolt: Self hostable, open source, password manager for teams

#42

Post by 8fingerlouie »

dmacedo wrote: post #25
verandaguy wrote: post #16

I like this a lot. I've been a Bitwarden user for the past few months and I'm not looking back, but I'm so happy there's reasonable competition: - It's still OSS, so you can self-host, which is a big selling point for me - There's a managed/hosted option, which is a big selling point for probably most users - It's got a browser plugin à la BitWarden/1Password, which is a crucial feature for any well-polished password…

Likewise, and I'm loving Bitwarden so far! Although I'm using the dockerized rust API (1) for self-hosting it, and so far it's been working great for months! I am keeping a close eye on the container, and backing up the data hourly to ensure I don't need to worry about loosing anything. (1): https://github.com/dani-garcia/bitwarden_rs

I was evaluating Bitwarden years ago (before bitwarden_rs), but was thrown off by the lack of support for 2FA tokens without a subscription.

Does selfhosting with bitwarden_rs solve this ? or do i still need a subscription for storing 2FA tokens along with passwords ?

I have absolutely no problem paying once per major version for software, open source or not, but i refuse to pay any subscription. At least when buying a version i can choose to upgrade or not.

Re: Passbolt: Self hostable, open source, password manager for teams

#45

Post by gspr »

sdan wrote: post #22

pass[0] has been the best of everything so far. gpg based and easy to use with keyboard shortcuts. i like alternatives like htis, but pass is super barebones and highly available. [0]: https://www.passwordstore.org/

It is not an understatement to say that pass saved password management for me. That tool is a lifesaver!

Re: Passbolt: Self hostable, open source, password manager for teams

#46

Post by amelius »

elygre wrote: post #36
amelius wrote: post #34

Does "for teams" mean that passwords can be shared? And is password sharing a good idea to begin with?

Password sharing is not a good idea, but sometimes or even often unavoidable.

I have the feeling that password sharing is only unavoidable in a company that doesn't care much about security.

Any company that takes security seriously would, I suppose, have personal passwords as a strict requirement. They wouldn't use services that can't comply with this requirement.

Re: Passbolt: Self hostable, open source, password manager for teams

#47

Post by smartbit »

Tepix wrote: post #39
smartbit wrote: post #18

Pros - free open source - group management can be delegated - works fine with mac, linux & windows browsers - maintenance free self hosted on k8s for 2 years - lack of mobile apps has not been issue - UX is ok, no complaints - requires little end-user support Cons - only password field is encrypted - no warning that Notes are not encrypted - promises ‘Secure files & notes (Coming soon)’ for more than year - password…

> - lack of mobile apps has not been issue Why hasn't it been an issue? How do I access my passwords with Passbolt on my mobile device when I'm offline?

In our use case Passbolt is used for shared Company passwords. Seemingly these have are not used on mobile devices. Our company has an healthy work life balance and we don’t perform deployments, upgrades and maintenance outside office hours from our mobile devices.

Passwords for personal Company accounts, like Active Directory & passbolt private key, we store in our private password manager. These accounts get disabled when leaving the company.

What use cases do you have where you can’t use a laptop for company related activities?

Re: Passbolt: Self hostable, open source, password manager for teams

#48

Post by polskibus »

smartbit wrote: post #18

Pros - free open source - group management can be delegated - works fine with mac, linux & windows browsers - maintenance free self hosted on k8s for 2 years - lack of mobile apps has not been issue - UX is ok, no complaints - requires little end-user support Cons - only password field is encrypted - no warning that Notes are not encrypted - promises ‘Secure files & notes (Coming soon)’ for more than year - password…

Does sentry have password management options now?

Re: Passbolt: Self hostable, open source, password manager for teams

#49

Post by smartbit »

chickahoona wrote: post #24
smartbit wrote: post #18

Pros - free open source - group management can be delegated - works fine with mac, linux & windows browsers - maintenance free self hosted on k8s for 2 years - lack of mobile apps has not been issue - UX is ok, no complaints - requires little end-user support Cons - only password field is encrypted - no warning that Notes are not encrypted - promises ‘Secure files & notes (Coming soon)’ for more than year - password…

If you want secure files and notes too then have you ever tried out Psono? The free version supports those and solves most of the Cons (e.g. Psono has no offical helm yet either). (Full disclosure, I am the main developer behind Psono)

Thanks for mentioning. Wasn’t aware of it, see it on https://alternativeto.net/software/passbolt/?platform=self-h.... Wish you all the best.

Having a migration tool, would make considering a migration much easier ;-). No immediate plans to migrate BTW.

Re: Passbolt: Self hostable, open source, password manager for teams

#50

Post by throw0101a »

lexicon0 wrote: post #9

Why would I pay at least 450 euro per month for something I have to run myself? I appreciate that support and maintenance costs are certainly something to pay for, but a high monthly charge when I'm taking all the risk, and paying for the hosting immediately turns me off. Especially considering the 4 hour SLA on phone support for the enterprise version. If the password management system is down, work stops. I'd rathe…

> Why would I pay at least 450 euro per month for something I have to run myself?

Some people/teams/departments are busy with other things, so that amount is worth the cost of outsourcing a service such that the team members can focus on other things.

Also:

* why would anyone run RHEL when they can run CentOS? (The cost of a service being down is more than the support fee.)

* why would I go to a restaurant when I can cook a meal at home for much less?

* why would I pay for a car wash when a garden house and a sponge worth just as well?

Also also, you may want to actually check what the pricing is:

* https://www.passbolt.com/pricing/pro

Post reply on HN