We use https://commonkey.com/ , it works pretty great and all the encryption is done client side (although the usual caveats about javascript encryption still hold)
+1 for commonkey and their client-side encryption/decryption
Ask HN: How Do You Securely Share Passwords in Teams?
21–30 of 67 posts
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#22Keepass wallet stored on a secure, internal network.
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#23Team Password http://www.teampassword.com/
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#24I've been thinking about this lately and it occurred to me that it would be nice to be able to store sensitive info in an area accessible to everyone on the project but still be able to limit access.
Currently we use ssh keys to limit access to servers and code repositories so the perfect solution would allow passwords and such to be protected by similar means.
I believe gpg[0] has a solution but I have not implemented it myself yet.
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#25https://www.secureshareme.com/
Pros: 1. Open source tool, you can run internally in your company. https://github.com/saravanacp/secureshareme 2. Very secure: it encrypts the data in the browser and the key is stored in the URL anchortag which is not sent to server at any point of time. Only the sender and the receiver has access to the keys. 3. You can also opt to send a secondary verification code to receiver's mobile for two layers of security. 4. Option to self distruct message based on time or if an attack is detected.
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#26Earlier quoted context omitted.
Don't you have external services which use a password? DNS provider, VPS admin console for example?
Not really, we have our own datacenter and DNS servers. We have HSMs for somethings (like CA certs) and yubikey/similar for things that require passwords but those are all protected by user-specific certificates.
Do you have a company Twitter account?
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#27Ideally, you don't share passwords. If it is a server, every user should have their own account with sudo access if needed. If it is a website that you are unable to add multiple users to an organization with, LastPass has a password sharing feature that doesn't directly expose the password with people you share it with. Although if someone cares enough, they will be able to find it. Any time an employee leaves a com…
This is pretty much how we do it. We have many sites that only allow a single user and we use LastPass for sharing passwords with the relevant groups of users that the site accessed by.
We also use LastPass. It has the knock-on benefit of getting everyone used to LastPass, and they inevitably start using it to manage all their passwords, and generate secure ones for all sorts of different sites where they would otherwise use the same password across sites.
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#28We use https://commonkey.com/ , it works pretty great and all the encryption is done client side (although the usual caveats about javascript encryption still hold)
I read that as com monkey. :D
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#29Earlier quoted context omitted.
Not really, we have our own datacenter and DNS servers. We have HSMs for somethings (like CA certs) and yubikey/similar for things that require passwords but those are all protected by user-specific certificates.
Do you have a company Twitter account?
Yes/no, one exists but its unrelated to my job. Its probably worth noting that we also have sets of accounts that while password protected are essentially considered public. Those accounts are accessible to anyone who knows the well-known standard passphrase
Re: Ask HN: How Do You Securely Share Passwords in Teams?
#30"Sharing Passwords" could mean sharing the master account of a service you don't have ssh/certificate access to