1

Does anyone know of a secure way of storing passwords. I want to keep all the Information Systems Departments passwords in one place. But I need whatever program, app or storage avenue to be very secure. Any ideas?

8 Spice ups
2

Store them on Dropbox or one drive.

1 Spice up
3

Pick your poison.
There are more password managers and file encryption services than you can count.
My first two thoughts would be LastPass and KeePass, but a quick google for “password vault” will bring you to dozens of options.

2 Spice ups
4

I use keepass, it can handle multiuser and can sync if 2 people make changes.

4 Spice ups
5

We use password safe. The database file is encrypted and we store it in an admin only folder on one of our shared drives. It works well for our small IT department.

1 Spice up
6

I either use Lastpass or Roboform (great for filling in Windows Forms). For non-sensitive stuff like homelab passwords or “temp-ish” stuff just regular txt file.

2 Spice ups
7

Last pass with two factor authentication

2 Spice ups
8

I use LastPass and KeePass. One for personal, the other for work.

2 Spice ups
9

I’ve used password safe. If we’re talking about the same one, only one person can be in at a time with modify rights. For personal stuff I use keypass. For enterprise stuff, I was very happy with Thycotic Secret Server. It has full auditing of who did what with passwords, and it can if you have the right licensing automatically change and update passwords for you. We used the free version at the time which I think was good for 250 secrets. It uses SQL server on the back end.

@jordan-thycotic

2 Spice ups
10

+1 for Thycotic. I have an on prem server and am testing the cloud version.

2 Spice ups
11

We use Keepass and 1Password (both locally and cloud)

12

Third, for SecretServer by Thycotic.

Also just stumbled on some possible Powershell commands for creating and accessing secrets.

Will be try to use in a SSL script to generate and store private key passwords.

1 Spice up
13

Excel…on network share
I removed the password to the excel file as it was making it difficult for everyone to access.

2 Spice ups
14

Thank you for the shout out and glad that the free version is working well for you!

Pam, nice to virtually meet you! I’d love to learn more about your use case and the need for securely storing your passwords.Are you looking for additional functionality, including as Patrick mentioned the automatic rotation of passwords? If you are interested in secure vaulting only, I would highly recommend our Secret Server Free edition which you can download here. Please PM me if you have any questions. Best, Jordan

15

I happen to like lass pass. as a cyber professional i would recommend them. I use lasspass both personally and professionally. I think one of the best options they offer is their password generator. These passwords are often over the top secure and with lasspass you can have the web-browser addin to auto-populate the password for you on a site of your choosing. One of the biggest fears of saving passwords in the cloud is “what if they get hacked, then all my passwords are compromised” while a valid concern, my experience with lasspass is they are a security focused application. Nothing is 100% secure besides a forgotten password. Regardless of the application of your choosing, as a cyber security professional i would suggest always using two-factor authentication method. Should the password application be “hacked” the risk of being compromised is near zero.

Baker

1 Spice up
16

Unfortunately, what if they get hacked isn’t a what if with last pass. It’s happened more than once recently.

1 Spice up
17

Hey Pam! If you’re still shopping around for a password manager, check out Dashlane Business for your team! Your team’s data will be secured with our U.S. patented security architecture and we support two-factor authentication, as well as U2F authentication and U2F-enabled YubiKeys. Moreover, if your team uses PCs, we announced a few months ago that we’ve worked with Intel to bring hardware-based password protection to PC users.

You can try it absolutely free for 30 days or if you have any questions, please feel free to DM me! I’d love to learn more about your team’s needs and see how we can help. :slight_smile:

1 Spice up
18

Ive used keypass and dashlane, I prefer the Dashlane as it not only store then but enters any information you have stored into pages and forms for you.

1 Spice up