News for hackers. Stuff that matters.

A comment on Ask HN: How To: Store and share passwords in a company?. Parent comment

Re:Ask HN: How To: Store and share passwords in a company? by wodenokoto on Monday September 02, 2024 @12:41AM (#41422632)
What’s SSO and how do I put vendor API keys into it? Like one of the most important APIs we have is just 1 key and that’s it. I don’t think the vendor has heard the term “key rotation”
[ Parent | on HN ]
Re:Ask HN: How To: Store and share passwords in a company? by steve1977 on Monday September 02, 2024 @04:50AM (#41423740)
I would recommend you get some people with IT security knowledge on board, either permanently or at least to do a review.
[ Parent | on HN ]
Re:Ask HN: How To: Store and share passwords in a company? by duckmysick on Monday September 02, 2024 @06:18AM (#41424160)
For API keys you want to look into secrets management, for example Hashicorp Vault or OpenBao. AWS/Azure/Google Cloud also have their own secrets management features.
[ Parent | on HN ]