Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Passbolt: Self hostable, open source, password manager for teams

passbolt.com

Post reply on HN
Print view View original

61–70 of 101 posts

Re: Passbolt: Self hostable, open source, password manager for teams

#61

Post by kreetx »

smartbit wrote: post #47
Tepix wrote: post #39

Earlier quoted context omitted.

> - lack of mobile apps has not been issue Why hasn't it been an issue? How do I access my passwords with Passbolt on my mobile device when I'm offline?

In our use case Passbolt is used for shared Company passwords. Seemingly these have are not used on mobile devices. Our company has an healthy work life balance and we don’t perform deployments, upgrades and maintenance outside office hours from our mobile devices. Passwords for personal Company accounts, like Active Directory & passbolt private key, we store in our private password manager. These accounts get disabl…

I don't think you can dictate others' practices. They might as well want to deploy stuff from their mobiles.

Re: Passbolt: Self hostable, open source, password manager for teams

#62

Post by tfigment »

dewey wrote: post #38
tazeg95 wrote: post #33

You just need git, ssh and pass ( https://www.passwordstore.org/ ), see https://fr.jeffprod.com/blog/2019/gerez-vos-mots-de-passe-av... (french)

Or https://github.com/gopasspw/gopass if you want something passwordstore compatible but with additional team features.

I use gopass myself and got it working on my windows laptop Including WSL and still use it. I even tried to adopt within the team and then its flaws were in full view. Hard to setup correctly on machines, hard to share passwords in team. Reencrypting passwords worked sometimes but not always for all team. I gave up trying to get team to use it.

Re: Passbolt: Self hostable, open source, password manager for teams

#63

Post by vxNsr »

httpsterio wrote: post #59
elric wrote: post #53

Earlier quoted context omitted.

How does that work? If it's open source, I can get the source and run it for free, hell, I could even redistribute it for free. What's stopping me from doing this? I assumed it was that the non-free features were distributed under a proprietary license which comes with an invoice attached?

Well, the law and moral basically. What stops you from torrenting all your games and apps and not distributing them forward?

Open source implies that the law doesn’t prevent you from doing whatever you want with it.

Re: Passbolt: Self hostable, open source, password manager for teams

#64

Post by elric »

remy_ wrote: post #56
elric wrote: post #53

Earlier quoted context omitted.

How does that work? If it's open source, I can get the source and run it for free, hell, I could even redistribute it for free. What's stopping me from doing this? I assumed it was that the non-free features were distributed under a proprietary license which comes with an invoice attached?

It's the same model than redhat, you buy a subscription, and the software checks if you have a valid subscription. Nothing is stopping you from modifying the source to remove that check, re-build and re-distribute for free (or for a fee) under another name. This allows community-driven projects like Centos or Fedora to exist. It's an ambitious business model, which doesn't prevent other to compete. The bet is compani…

Thanks for clarifying that, I'll have to reconsider my opinion on passbolt.

Re: Passbolt: Self hostable, open source, password manager for teams

#65

Post by GoblinSlayer »

kreetx wrote: post #61
smartbit wrote: post #47

Earlier quoted context omitted.

In our use case Passbolt is used for shared Company passwords. Seemingly these have are not used on mobile devices. Our company has an healthy work life balance and we don’t perform deployments, upgrades and maintenance outside office hours from our mobile devices. Passwords for personal Company accounts, like Active Directory & passbolt private key, we store in our private password manager. These accounts get disabl…

I don't think you can dictate others' practices. They might as well want to deploy stuff from their mobiles.

Full of rootkits.

Re: Passbolt: Self hostable, open source, password manager for teams

#66

Post by fraktl »

jeroenhd wrote: post #58
thaumaturgy wrote: post #4

Earlier quoted context omitted.

I did a pretty thorough review of PassBolt a couple of years back when I was trying really hard to get a company to adopt it and give up their "we store our all of our passwords on a spreadsheet" approach. I don't have my notes any more, but off the top of my head, the big points in favor were: - Self-hostable. The tech guy in charge just resolutely would not use any hosted service, period. In his evaluation, trustin…

> - Built with PHP. Same guy was uncomfortable with Python, Node, and all that, and insisted that he be able to maintain and troubleshoot the codebase himself if necessary, so it had to be PHP. Now that's an interesting perspective, I don't think I've heard anyone consider PHP to be more secure than Python before.

> I don't think I've heard anyone consider PHP to be more secure than Python before

If you heard anyone discuss language X being more secure than language Y, then I'm sorry - but that person has no clue what they're talking about.

PHP is as secure or insecure as Pythong / Ruby / Go / .

Hammer depends on the one holding the hammer.

Re: Passbolt: Self hostable, open source, password manager for teams

#68

Post by oarsinsync »

amelius wrote: post #46
elygre wrote: post #36

Earlier quoted context omitted.

Password sharing is not a good idea, but sometimes or even often unavoidable.

I have the feeling that password sharing is only unavoidable in a company that doesn't care much about security. Any company that takes security seriously would, I suppose, have personal passwords as a strict requirement. They wouldn't use services that can't comply with this requirement.

There’s also a difference between password sharing and shared secrets. Sometimes you need something that is like a password, and needs to be shared amongst a team.

One example would be an inter-company IPSec VPN PSK.

Re: Passbolt: Self hostable, open source, password manager for teams

#69

Post by elric »

jeroenhd wrote: post #57
sdan wrote: post #22

pass[0] has been the best of everything so far. gpg based and easy to use with keyboard shortcuts. i like alternatives like htis, but pass is super barebones and highly available. [0]: https://www.passwordstore.org/

Although I always appreciate alternatives being given on HN, I don't see how this competes with Passbolt. There's no password sharing between groups of an organization, which is exactly what Passbuilt is built for. Personal password managers are great unless you want to share a list of passwords in a group within an organization.

You can use pass to share passwords between multiple people in an organization. Pass supports multiple GPG keys per entry, and you can assign sets of keys to directories. You could have a directory per team, for instance.
Post reply on HN