21–30 of 48 posts
The only thing it lacks is a more powerful granular permissioning now that we've scaled. Ideally, there'd be a way for each new hire to automatically get an account and roles via LDAP, and immediately have access to necessary secrets based on that with no manual step.
I think it's totally insane to let a third party manage your passwords.
All three of these expose your entire password database to system memory every time you decrypt a single secret giving you no reasonable defense against malware. LastPass, 1pass, BitWarden, and most other password managers doubled down on good UX, but the security is pretty terrible. They help users avoid using the same password for every site, granted, but is that really good enough? Consider that every time you go…
All three of these expose your entire password database to system memory every time you decrypt a single secret giving you no reasonable defense against malware. LastPass, 1pass, BitWarden, and most other password managers doubled down on good UX, but the security is pretty terrible. They help users avoid using the same password for every site, granted, but is that really good enough? Consider that every time you go…
Open source. Using the hosted service though which is reasonably priced.
The UI/UX is a bit clunky, especially for sharing. But it does the job for the most part.
That said, for a team size For teams 50+ I would choose LastPass which has better 'enterprise' features, but despite having used it at work for 7 years I still really dislike it. This could be because I've been using 1Password in a personal/family capacity for about 12 years!
Personally I've been using KeePassXC with self hosted Nextcloud sync for many years and it works great on desktop, apart from minor merge conflicts when server or clients been offline for long. I haven't found a good solution for iOS but Keepassium and Minikeepass is OK for occasional logins. I think it might bee more of a Nextcloud issue on mobile. I think it's totally insane to let a third party manage your passwor…
keepassxc makes my life easier.
All three of these expose your entire password database to system memory every time you decrypt a single secret giving you no reasonable defense against malware. LastPass, 1pass, BitWarden, and most other password managers doubled down on good UX, but the security is pretty terrible. They help users avoid using the same password for every site, granted, but is that really good enough? Consider that every time you go…