Password Manager

[itgeek]

Hi,

 

Just looking to implement a password manager for our ICT Team. I have looked at Keeper and 1Password, does anyone have any recommendations.

 

Thanks in advance

[lmrogers]

I implemented 1Password for my team last year and it's been great. Works well across all devices, you can give granular control over different vaults and each member gets a personal vault to store passwords in. Pricing is good as well, I think for about £200 a year we get a 10 user license.

[sonofsanta]

We've been using KeePass for years. Free + open source, little application you can store on a share, encrypted and password protected. You can back it up as you would any other local file. Works better, IME, for sharing among a team than a browser extension: you don't need to faff about with 2FA for logging in, and you don't need 2FA as much because you are protecting it in other ways, as you are all your local files. Multiple people can have it open at once and it can synchronize multiple changes without issue. Edited May 23, 2022 by sonofsanta

[TechMonkey]

I've used LastPass for over a decade and used it with my previous team for a good while. Only downside is it is a bit costly, but does everything marvelously.

[sonofsanta]

Oh, and if you are looking at browser ones specifically: I've switched to using BitWarden as my personal vault recently after LastPass started charging and it's been ace. Free for personal use, looks like $3/user/month for teams of people.

[RLR]

We're currently using thycotic secret server as it's free up to a point. I'm hoping to move all staff or at least all support staff to bitwarden if we can get the budget for it.

[Roberto]

Hi,

 

Just looking to implement a password manager for our ICT Team. I have looked at Keeper and 1Password, does anyone have any recommendations.

 

Thanks in advance

 

Do you have any requirements?

[Norphy]

If you're after something that's locally hosted, PasswordState is a good one and is free for up to five users. It's not especially expensive once you go above five users either.

[paulkerton]

For personal use, I've been using BitWarden and it's been brilliant. Ever since LastPass started playing silly buggers with their accounts and pricing, I've not looked back.

 

I know BitWarden have Teams and Enterprise tools too. Might be worth a look?

[Norphy]

For personal use, I moved to Dashlane after LastPass got sold to LogMeIn, who have a history of playing silly buggers with pricing plans and have pretty bad security practices too. At that point, I instantly decided that LastPass was no longer worth it, despite having nine months or so left on a subscription.

 

FWIW, Dashlane is a very good (albeit expensive) password manager for personal use but I didn't rate their business offerings when I was evaluating them about two years ago.

[howartp]

I've got about three 1Password for Teams accounts, for different organisations I'm involved in.

 

I've also got a call outstanding with Sales about possibly using wider within school, given all the multiple accounts and passwords staff are using now.

[psydii]

I've used LastPass for over a decade and used it with my previous team for a good while. Only downside is it is a bit costly, but does everything marvelously.

 

10 year LastPass user here. They recently destroyed my certificates and ssh keys. Apparently they now only support certain file type as attachments, and if you had any already uploaded that were not of that type, then they are effectively lost.

[TechMonkey]

I don't use it for attachments. Just passwords and notes, we use SharePoint for files.

[MartinT]

We're using LastPass for our IT team and it's excellent. There are Android and iOS apps too, which helps when needing a password while roaming around.

[jthompson]

KeePass here, since yonks. db file on shared storage with multiple concurrent users being handled well. Never run into any problems.

 

Not using any browser integration other than generic autotype, so we're not currently able to use it directly on a Chromebook. However, with the db file synced to Google Drive storage, it can be accessed via mobile app (KeePassDX and KeePass2Android are both good options on Android).

 

There's an official MSI available, too, which helps with deployment. In fact, we make it (the software) available to all staff, so that they have access to a password manager if they want to use it.

 

KeePassXC is also worth a look. Works with the same db file format as KeePass, so fully compatible, but adds some nice features like T-OTP codes and favicon fetching.

[HarryMonkey]

Lastpass for us too. excellent.

[Chris_Cook]

We use Zoho Vault. I'm not sure on the pricing. We also use their helpdesk, but they are separate products other than the login.

 

Works well, and gives some usefull information on weak and duplicated passwords.

[gregthebest]

We use KeePass with 2 special config .XML file. One for student with a lot of restriction and another one for teatchers.

Database , stored on server , file is copied localy when teatcher log off their session. So they can use it at home.

[HPlum78]

If you use Azure the KeyVault

[ryangooding29]

We use KeePass. Haven't used it too much but seems like a decent tool and does what it needs to!

[MatthewL]

We have used KeyPass but recently installed and setup Passbolt on a server, seems ok for what we need.

 

I use LastPass at home, cannot fault that, does the job for me.

[XiJ]

For personal use I have Bitwarden. And recommend it to my family. It’s easy to use, the browser plug is excellent and pretty much all of my passwords are now just a long string of generated characters.

 

At work we’ve been through a few and used lastpass for a long time. Now we’ve moved systems and it’s integrated to IT Glue and a host of others.

[Zoom7000]

I use 1Password Family for personal use. I've watched a lot of YouTube videos that recommended it highly over the likes of LastPass and Dashlane, the former of which has some pretty shady privacy practices according to

.

[DrCheese]

1password personally & I bought it for the team here as well - Fantastic piece of software.

Used keepass before it, but it didn't really work well with a shared onedrive.

[CHiLL]

I use BitWarden as my personal password manager, after moving to it from LastPass when they introduced the PC and mobile distinctions. It's been great, though it's not as smooth as LastPass was...I find the autofill doesn't quite work as well and the app is slower on Android.

 

We're still dubious about hosted solutions for storing workplace credentials, so our team are still using a shared Excel password document via OneDrive. As for staff...ever since Microsoft introduced syncing into Chromium Edge, staff can save their credentials in there and access is anywhere, providing they sign into Edge with their workplace credentials.