How do you securely share passwords and secrets in a startup or organization? We're currently using Meldium but looking at other alternatives.
Ask HN: How Do You Securely Share Passwords in Teams?
1–10 of 67 posts
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#2Password safe in a smb share. I don't really like the idea but it's imposed.
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#3Password safe in a smb share. I don't really like the idea but it's imposed.
How do you securely share the password to the password safe containing the passwords?
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#4Passwords: We don't. Everything that could use a password is either keyed or certificate auth. Edit: I should add that there are things that use passwords but those are user-specific accounts or communal accounts (which are considered, essentially, public accounts) and are accessible only on the internal network. Users are responsible for the safe-keeping of those passwords and user accounts can do no harm, so to speak, if compromised.
Secrets: In a closed office, verbally.
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#5Large enterprises usually use PIMs (Privileged Identity Managers), web based consoles where you check out credentials for the task. I have seen IBMs and it has some pretty creepy (if you are the dev)/powerful (if you are CISO) features like session recording etc [0], does allow you to see who used what at what time and rotates passwords for the systems required between use..
[0] http://www-03.ibm.com/software/products/en/pim/
edit: video demo https://www.youtube.com/watch?v=CITq80gf6Hk
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#6Why are you looking for alternatives? Looking at this issue myself.
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#7Ideally, you don't share passwords. If it is a server, every user should have their own account with sudo access if needed.
If it is a website that you are unable to add multiple users to an organization with, LastPass has a password sharing feature that doesn't directly expose the password with people you share it with. Although if someone cares enough, they will be able to find it.
Any time an employee leaves a company, all shared passwords should be reset. It doesn't matter if it was an amicable departure or not.
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#8Re: Ask HN: How Do You Securely Share Passwords in Teams?
#9Passwords: We don't. Everything that could use a password is either keyed or certificate auth. Edit: I should add that there are things that use passwords but those are user-specific accounts or communal accounts (which are considered, essentially, public accounts) and are accessible only on the internal network. Users are responsible for the safe-keeping of those passwords and user accounts can do no harm, so to spe…
Don't you have external services which use a password? DNS provider, VPS admin console for example?
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#10Honestly the original "share" isn't the big issue -- many ways to communicate securely. But the history is what will get you if your communication platform ever gets broken into.
Most of the external accounts (log analysis, analytics, CDN, etc) have individual accounts, no sharing necessary, up to the individual to maintain complexity and remember the password.
For other services, certificates and multiple authentication methods (2FA) works out nicely.