Live data from Hacker News

Ask HN: How Do You Securely Share Passwords in Teams?

news.ycombinator.com

11–20 of 67 posts

Re: Ask HN: How Do You Securely Share Passwords in Teams?

#13

Ideally, you don't share passwords. If it is a server, every user should have their own account with sudo access if needed. If it is a website that you are unable to add multiple users to an organization with, LastPass has a password sharing feature that doesn't directly expose the password with people you share it with. Although if someone cares enough, they will be able to find it. Any time an employee leaves a com…

This is pretty much how we do it. We have many sites that only allow a single user and we use LastPass for sharing passwords with the relevant groups of users that the site accessed by.

Re: Ask HN: How Do You Securely Share Passwords in Teams?

#14
post #4

Passwords: We don't. Everything that could use a password is either keyed or certificate auth. Edit: I should add that there are things that use passwords but those are user-specific accounts or communal accounts (which are considered, essentially, public accounts) and are accessible only on the internal network. Users are responsible for the safe-keeping of those passwords and user accounts can do no harm, so to spe…

Don't you have external services which use a password? DNS provider, VPS admin console for example?

Not really, we have our own datacenter and DNS servers. We have HSMs for somethings (like CA certs) and yubikey/similar for things that require passwords but those are all protected by user-specific certificates.

Re: Ask HN: How Do You Securely Share Passwords in Teams?

#17
When we HAVE to share passwords, we email them using Virtru (encrypted emails). All of the encryption is done client side. You can set the email to expire after 1 hour. No one would ever be able to read it again. https://www.virtru.com/other-platforms

That being said, we use personal accounts for all external services. All personal passwords are stored in 1Password.

Post reply on HN