1

At my workplace we used to keep all the passwords for our servers in a spreadsheet (Bad Idea), Luckily we managed to persuade management to change to KeePass, where they are encrypted.

I’m looking for something more advanced now though, preferably with multiple user levels. Eg. Different Techs only getting the passwords they need.

What do you use for password management?

David S.

@LastPass

10 Spice ups
2

I’d be interested in this also.

Especially if it had robust multiple access levels and authentication methods.

Be nice if it had a ‘break the glass’ function too.

Manager X can elevate his access to level Y in an emergency, but this then trips alerts and/or other actions.

I know that last is a lot to ask - since it just occurred to me 5 seconds ago.

3 Spice ups
3

I’ve got a small group using Lastpass, which has gone fairly well, and I believe would hit your points. For everyone else (since LP is paid), KeePass.

1 Spice up
4

I am interested in this too.

5

LastPass would do exactly what you want.

3 Spice ups
6

Make your servers 2 factor authentication capable. Put your admins in groups for “their” servers. Issue them all smart cards and readers. now for them to manage a server they have to have a smartcard and they only have to remember one password the one to unlock their card specify that it must be longer than 4 Chars, that provides enough deterrent for most servers and is a great way to start tightening up an environment.

7

Just downloaded it works great. thanks

8

I’ll second LastPass.

If you set up Shared Folders you can grant access to specific users or groups.

You can force 2 factor authentication for getting into LP.

@Robert, that’s a pretty radical idea but I like it. Not sure it would be good in practice, but in theory it sounds useful.

9

We’ve been using truecrypt to encrypt a spreadsheet.

10

I’m also facing a similar situation.

These are some good answers.

11

I like the look of lastpass, but that is a fair amount of money for each user. Funding from management is like blood from a stone :wink:

12

Secret Server

PasswordState

LastPass

or if you like KeePass but want the ability to set access rights look at Pleasant Password Server

Keep in mind Excel can do AES encryption, so whilst it’s less than ideal it’s not quite as bad as it used to be, least I assume not.

1 Spice up
13

Thanks for mentioning LastPass, guys :slight_smile:

David - I’m the green gal for LastPass and would be happy to address any questions - there are discounts for having more licenses, plus LastPass Enterprise is one cost for both SSO and password vaulting. Users get the same great LastPass experience but admins have robust sharing, security and reporting capabilities. Happy to drill down into specific questions if we might be of help, regardless of where your decision takes you.

2 Spice ups
14

Even at list price it’s only $2 per month per user. For the increased security and reduced workload, that’s tough to beat. I only have it for our admins, though, not for regular users.

1 Spice up
15

Amber,

We are in a trial period with LastPass. I have a question about admin passwords and how to prevent an admin from changing their password within a cloud solution. Do you have any advice?

16

Hi Tony: If you mean the master password, the admins never know it and we currently don’t have a policy to disallow changing it, if you mean a site password for an online account - this is at the site level so not something we can directly control. Reporting in LastPass does help you know who last accessed what while using LastPass so in that way could help with accountability, but cannot prevent an account change from being made on the site. Does that help? If you can clarify further on the scenario happy to address further questions.

1 Spice up
17

I use Lastpass at home and on my cellular. Works very well. Waiting for full iOS integration, but knowing Apple, it won’t happen. At work it’s all in my head, which so far hasn’t been an issue.

18

I love KeePass and it’s free. I even wrote a how-to on how to create a shared DB:

http://community.spiceworks.com/how_to/show/33119-how-to-create-a-synchronized-secure-password-database-with-keepass-professional-and-a-service-such-as-dropbox-box-google-drive-or-local-network-share

19

Hi Amber. If I have users who today are using admin credentials with a cloud provider (SalesForce, HubSpot, etc…), I can prevent the (admin) user from knowing and seeing the password using LastPass. However, how do I prevent them from clicking on the forgot password link, receive an email and reset the admin password? Now, our system admins will not know the admin password.

Thanks…

1 Spice up
20

Passwordstate