News for hackers. Stuff that matters.
Re:Ask HN: How does your company manage passwords? by davismwfl on Monday November 05, 2018 @06:20AM (#18381451)
1Password is great, the vault management and sharing makes it pretty slick and allows you to control who has access to what. You can have production vaults, separate from staging, test and development etc.

I started using it for family sharing of security at first and it proved super valuable. It is also nice you can add attachments and aws, ssl keys etc to it easily.

Also, it allows for easy 2fa to be shared amongst the team for most websites and products.

edit: added 2fa line.

Re:Ask HN: How does your company manage passwords? by vectorEQ on Monday November 05, 2018 @06:14AM (#18381429)
sso+2fa all the things. easy for users as they only need 1 token and set of credentials. so no need to manage databases full of passwords.

okta is useful service for it which is popular because it's good / useful, but it needs to be set up properly and securely by people with experience in it. since messing it up can be BAD as any compromise is obviously going to be more of impact. might be a bit of an investment at first, but it will save in administrator's time / maintenance etc. later.

do it carefully though. really carefully :) only need to do it once, so it's worth to take the time and investment and do it right.

Re:Ask HN: How does your company manage passwords? by vectorEQ on Monday November 05, 2018 @06:15AM (#18381432)
there's also products like 'secret server' , but i tend to dislike password management solutions ,as they are not a solution to the root cause and if compromised, it's a major issue instead of 1 limited user being owned.
Re:Ask HN: How does your company manage passwords? by smartis2812 on Monday November 05, 2018 @06:08AM (#18381402)
A .txt File on a Network Share which has a FTP-Access. :)
Re:Ask HN: How does your company manage passwords? by onion2k on Monday November 05, 2018 @06:42AM (#18381542)
You should publish it to the web to make it easy to use, but give it an obscure filename to make it secure.
Re:Ask HN: How does your company manage passwords? by smartis2812 on Monday November 05, 2018 @06:52AM (#18381580)
is "passw0rds.txt" not obscure enough? xD
Re:Ask HN: How does your company manage passwords? by knopkop_ on Monday November 05, 2018 @08:41AM (#18382213)
My current employer uses Password Manager Pro, not sure how much they paid for it.
Re:Ask HN: How does your company manage passwords? by rorykoehler on Monday November 05, 2018 @06:12AM (#18381422)
Lastpass