Live data from Hacker News

Passbolt – Open source password manager for teams

passbolt.com

1–5 of 5 posts

Re: Passbolt – Open source password manager for teams

#4
post #3
post #2

This tool is great! It is helping a lot on credentials sharing on an iberian IT team.

Sharing of credentials negates the very reason said credentials exist in the first place.

While I don't disagree in theory... practically there a number of services that have one "owner account" that represents an organization and a business needs to make sure they have control of that account regardless of personnel changes. PyPi and Rubygems are examples from an old job.

Even when a service, like Twitter, does have multi-user/multi-owner identities in some business plan this might not make sense for small teams.

Re: Passbolt – Open source password manager for teams

#5
post #4
post #3

Earlier quoted context omitted.

Sharing of credentials negates the very reason said credentials exist in the first place.

While I don't disagree in theory... practically there a number of services that have one "owner account" that represents an organization and a business needs to make sure they have control of that account regardless of personnel changes. PyPi and Rubygems are examples from an old job. Even when a service, like Twitter, does have multi-user/multi-owner identities in some business plan this might not make sense for sma…

A right solution would be a proper key management where each participant maintains his/her password/passphrase that unlocks group credentials.

Otherwise, a bullet proof audit trail with external timestamps would be required.