Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: 1Password vs. LastPass vs. Bitwarden for teams ?

news.ycombinator.com

Post reply on HN
Print view View original

41–48 of 48 posts

Re: Ask HN: 1Password vs. LastPass vs. Bitwarden for teams ?

#41

Post by blakeburch »

tenacious_tuna wrote: post #17
blakeburch wrote: post #16

I've been using 1Password for the last 4 years, both with a family account and a work account. It works perfectly for team management, since you can categorize passwords by vaults and give individual members. or teams, access to specific vaults. You can give guests outside your organization access as well. Beyond passwords, you can also share company cards, credential files, and 2FA tokens. In addition, 1Password doe…

Can you elaborate on "There's no way to guarantee security of passwords stored in someone's personal vault"?

Sure! As an admin, you're unable to see any passwords in an employee's "Personal" vault. This is by design, so that user-specific passwords aren't visible to _anyone_ in the org except for that user.

However, this has a few downsides. All of those features I mentioned (alerts for re-used, leaked, weak, or old passwords) are visible to the owner of the private vault, but admins won't be aware of those issues. It requires trust and security training to make sure that those issues are handled appropriately for private passwords.

Also, if someone has edit access for a vault, there's no way to prevent them from moving credentials to their personal vault or exporting credentials. Most people won't know how to do that and won't bother... but it's always a risk.

Re: Ask HN: 1Password vs. LastPass vs. Bitwarden for teams ?

#42

Post by sullof »

If you are interested in checking a completely different approach, you can look at Secrez https://github.com/secrez/secrez. It is a CLI secret manager that supports git repo for distribution. Using other packages in the suite, Secrez allows direct communication between local desktop accounts using SSL tunneling. Disclosure: I wrote it.

Re: Ask HN: 1Password vs. LastPass vs. Bitwarden for teams ?

#43

Post by sullof »

sullof wrote: post #42

If you are interested in checking a completely different approach, you can look at Secrez https://github.com/secrez/secrez . It is a CLI secret manager that supports git repo for distribution. Using other packages in the suite, Secrez allows direct communication between local desktop accounts using SSL tunneling. Disclosure: I wrote it.

It is not for team, right now. But I can add features in that direction if there is interest from the community.

Re: Ask HN: 1Password vs. LastPass vs. Bitwarden for teams ?

#44

Post by acmecorps »

thismodernlife wrote: post #27

To be honest, all of these are fine. The very fact that you're going to be rolling out a tool and educating your staff in secure password management is a huge win regardless of which option you choose. That said, for a team size For teams 50+ I would choose LastPass which has better 'enterprise' features, but despite having used it at work for 7 years I still really dislike it. This could be because I've been using 1…

I have been an avid user for LastPass since I knew password manager was a thing. But, I’ve been hearing about how good 1Password is from lots of sources. Seems like you know and have experience on both sides. Would you mind sharing why 1Password is better (or even have better experience) compared to LastPass? I use it personally and not in an enterprise setting. Your comment might just push me to use 1Password :)

Re: Ask HN: 1Password vs. LastPass vs. Bitwarden for teams ?

#45

Post by thismodernlife »

acmecorps wrote: post #44
thismodernlife wrote: post #27

To be honest, all of these are fine. The very fact that you're going to be rolling out a tool and educating your staff in secure password management is a huge win regardless of which option you choose. That said, for a team size For teams 50+ I would choose LastPass which has better 'enterprise' features, but despite having used it at work for 7 years I still really dislike it. This could be because I've been using 1…

I have been an avid user for LastPass since I knew password manager was a thing. But, I’ve been hearing about how good 1Password is from lots of sources. Seems like you know and have experience on both sides. Would you mind sharing why 1Password is better (or even have better experience) compared to LastPass? I use it personally and not in an enterprise setting. Your comment might just push me to use 1Password :)

I would say for me it's the user interface and general user experience. I find 1Pass more intuitive to use, the dedicated Mac and iOS apps are lovely and I also love the blog and general vibe of the 1Password company. Personality goes a long way! :)

I know people who think the exact opposite though, so give it a go and see what you think!

Re: Ask HN: 1Password vs. LastPass vs. Bitwarden for teams ?

#46

Post by 0x008 »

lordfosco wrote: post #35
0x008 wrote: post #29

Earlier quoted context omitted.

The only thing I don’t like about it is that I can’t figure out how to set a global hotkey on OS X.

I have had a pretty good time with MacPass [1]. It is not just fully KeePass compatible but also adds a nice native macOS flavor to the game. [1] https://macpassapp.org/

The question is: can I save a password generator profile per entry? Because different sites sometimes require certain characters or forbid them. In Keepassxc it seems to be global which is not really useful.

Re: Ask HN: 1Password vs. LastPass vs. Bitwarden for teams ?

#47

Post by tenacious_tuna »

blakeburch wrote: post #41
tenacious_tuna wrote: post #17

Earlier quoted context omitted.

Can you elaborate on "There's no way to guarantee security of passwords stored in someone's personal vault"?

Sure! As an admin, you're unable to see any passwords in an employee's "Personal" vault. This is by design, so that user-specific passwords aren't visible to _anyone_ in the org except for that user. However, this has a few downsides. All of those features I mentioned (alerts for re-used, leaked, weak, or old passwords) are visible to the owner of the private vault, but admins won't be aware of those issues. It requi…

Gotcha, okay! I thought you meant somehow there wasn't a way to guarantee the security of personal vaults in a vacuum, and that was... concerning.

This makes a lot more sense.

Re: Ask HN: 1Password vs. LastPass vs. Bitwarden for teams ?

#48

Post by sildur »

ravi-delia wrote: post #13
sildur wrote: post #6

Earlier quoted context omitted.

I have bitwarden self hosted. I'm using bitwarden_rs and it's really really good.

Have you had any trouble with the extension unlocking the vault? I had to switch back to the standard bitwarden, but I'd love to switch back.

Yes, I had, but the only thing I had to do is log out and log in again. Cumbersome, but not a deal breaker. And, as they said, it's already fixed. It's nice to self host because I have access to all the premium features. I have a family group in bitwarden where I share specific credentials (including OTP keys) with my family.
Post reply on HN