From a simple KeePass database to enterprise credential management solutions—what’s your setup at work?
You must log in or # to comment.
We use ITGlue because it lets us tie password records to documentation which makes finding things very streamlined.
Personally, I use Bitwarden
Keepass.
Backed up in the cloud, with a long password with plenty of non english characters in the password.
For learning new passwords, I write them down on a note in my wallet, without any explanation of where they lead or what username to use.
The same basically. For the real paranoid stuff I have the keepassx file in a veracrypt container.
We use PasswordState at work and KeePassXC for personal passwords.
As an admin for a Linux server, I want to institute a ssh pub key expiration policy for all the users and enforce non-reuse of old keys. Does anyone have a best solution for this?
How do you do your pubkey deployments? If you use ansible, it should be simple enough.
Sounds like certificates to me, but I don’t know of any such solution
Self-hosted Bitwarden only accessible from behind my self-hosted VPN.
I write it in plaintext then email it to myself. For my email password, I write that down on a sticky note next to my monitor with my webcam pointing towards it with Skype and Zoom always running so I can look at it when I’m not at home. I always make sure to turn 2FA off as well, since that gets annoying and isn’t very convenient.
I might choose to mirror the webcam stream to a public RTMP stream later, but not sure yet, since I think that might open up some security holes.
Also, if you use a really easy to remember password… I like P@ssw0rd! Easy to remember, and nobody will ever guess it because, get this… The ‘o’ is actually a zero!
Your password shows up to me as ************
This is exactly the kind of innovation I was looking for.
Not today, Russia.
Bit Warden, one password, whatever float your boat just not last pass.
For SHTF stuff GPG.
At work I keep them in onenote (they are encoded) because they won’t let us install an actual password manager and half the shit I log into doesn’t support SSO/doesn’t have it set up and is all on different password schemes. Our service account passwords are in a shared cyberark vault.
I tattoo them on my thigh like everybody else
Keepass
We have a KeePass DB as a fallback but mostly use a PAM solution to manage server access.
The method of champions. Post-it on the bottom of keyboard.
I would need a small book hidden under my keyboard. My work password safe has approximately 100 entries.
Got a thrift store keyboard. The pink sticky on the bottom said:
User: admin
Pass: password
I wish I was joking. Someone out there was dumb enough to need a reminder on that one.
Bottom of keyboard? Are you out of space on your monitor to place additional Post-its with user credentials on them? /s
Monitor bezel is for the less secure systems. Under the keyboard is for the secure stuff.
And the really secure systems are in the filing cabinet.
Boss, I need a third monitor, I’m out of space for post-its
Personally, 1Password, but their enshittifaction is serious.
Work, Password Safe. But we’re moving to CyberArk.
Why do companies name their password safe “Password Safe”? Thats about as relevant as naming a phone “Phone”.
See the Nothing Phone (2a)
It was a password safe before password safes were cool. https://www.pwsafe.org/2002.shtml
Thank you for clarifying!
I clicked the button to make a link but it didn’t work. :)
Markdown formatting can be tricky
I’ve been using 1password for over a decade. I’d love to know more about the enshitification you’re seeing.
I just looked back and my first vault item dates back to 2010. Time flies.
I think enshittification is slightly an overstatement. They’re under VC pressure now and moving aggressively towards a subscription model with capabilities increasingly behind the subscription. I bought a few licenses for Mac and PC a while ago; the software still works but no browser extensions - need a subscription for that. Also, take a look at their job postings. Same job pays double in USA vs Canada. Funny way to do things if they’re Canadian.
Thanks for a great response. I’ve been a paying customer for ages, and added my family as well. So I don’t have the paywall issues you’re seeing.
more dev than sysop, but: bitwarden
