3
Tawzer
6y

Anybody know of any enterprise software for password storage and sharing?

We have an issue where multiple people across different teams use the same accounts and need them to be able to access certain login information but not all login information.

I’m hoping for something free/open source but at this point I’m open to anything. Must have the ability to give users privileges.

Comments
  • 0
    LastPass?
  • 0
    @endofreach you might as well just use a sticky note then
  • 0
    Guys here at the office use 1Password
  • 1
    Maybe pass or gopass.
  • 1
    GNU Pass is what I'm using here.. not sure if it supports encrypting passwords in the password-store to multiple GPG keys though (for securely sharing it with others). But it would be a nice feature to add in :)

    Edit: what do you mean by privileges though? Account privileges would require the use of different accounts. Or timing to share passwords and ability to revoke access? Well, it's kinda like ripping a CD or downloading a YouTube video, right. Once you can see it, what stops you from saving it permanently somewhere else? That's why in SSH, the use of keys that can be revoked is so important for critical servers. Or access level to a centralized password repository perhaps? Pass is distributed via git, so it doesn't really have access roles. Either you can clone the repository, or you can't. Being able to decrypt the passwords in it is then up to whether the password was encrypted with your GPG public key.

    Edit #<no revision control here>: Check this out. https://medium.com/@davidpiegza/...
  • 1
    @Condor we want the ability to share passwords with certain users but not all users. The IT team manages software vendors but individual teams actually pay for the stuff so we need some way to share passwords so that when we update them every six months we don’t get helpdesk tickets about it. Also, we currently have password safe that all users have access to but since the UI is straight out of WinXP a lot of our users refuse to use it (they can be babies). I regularly steal sticky notes with passwords on them off of people’s computers.

    We just need more security.
  • 1
    @Tawzer In that case, Pass would be a neat solution I guess (it can encrypt to multiple users). It lacks a GUI though, but there's a handful of frontends for it such as QtPass. Also its Windows compatibility is a bit of a meh.. in WSL it works nicely (except for copying passwords to clipboard which WSL doesn't seem to be able to access), but in Windows it's kind of a pain in the ass to use. On Linux and Android it works like a charm though :)

    By all means try it out and see whether it fits your use case. Since it's using PGP under the hood (so asymmetric cryptography), it's a very secure solution. I guess that if the employees are using Linux or Windows 10 with WSL, pulling from the git repository can be automated. Given that the employees use stickers, I don't think that they're very technical? In that case Pass itself may not really be for them.. rather an under the hood engine of sorts. Presentation can then be achieved in QtPass.
Add Comment