Password Managers
-
SANS Institute just published their monthly OUCH newsletter and this month was about the importance of password managers (highly recommended, especially to average users). However, at the end of their newsletter, they have a link to the "Top Password Managers of 2017".
Do you know what I DON'T see? KeePass! How is KeePass not on this list? I wrote a how-to on Spiceworks on how to run KeePass on multiple devices a couple of years ago.
-
I wonder if it is due to one limitation.
User access.
@JaredBusch has assigned user access, keepass has a single user level.
-
@nerdydad They were pretty clear in that article that free password managers aren't included because they have their own roundup.
-
@gjacobse said in Password Managers:
I wonder if it is due to one limitation.
User access.
@JaredBusch has assigned user access, keepass has a single user level.
That is a good point. If that is the case, then I recommend Thycotic's Secret Server. Its free for up to 100 users and 1000 secrets. Its on-prem and integrates with AD, if necessary. Be forewarned. There is an info wall to download the server though.
Unless somebody has something that will run on a Linux distro that is free. I am open to suggestions.
-
@nashbrydges said in Password Managers:
@nerdydad They were pretty clear in that article that free password managers aren't included because they have their own roundup.
Good point. I didn't catch that. But that article is not entirely accurate as KeePass can do password replays based on URLs and show you the strength of your passwords while their chart shows that it does not.
-
I would recommend LastPass right up until LogMeIn bought them out. Their business model is to double, triple, then quadruple the price while simultaneously removing features from their free product. In fact, it's already happening.
-
KeePass is a great personal solution.
It is not a business solution.
Hell the Premium LastPass solution is barely usable in a business environment. Only in a really small environment like the one I have, because you can only have a single shared folder.
-
@jaredbusch said in Password Managers:
KeePass is a great personal solution.
It is not a business solution.Agreed.
-
@nerdydad said in Password Managers:
I wrote a how-to on Spiceworks on how to run KeePass on multiple devices a couple of years ago.
This is why KeePass is not even valid for my own personal use. It is too much work to maintain in a completely useful way.
If you have to think this hard to enable this across all devices 100%, then it is not going to be used 100% and that makes it worthless.
-
@jaredbusch said in Password Managers:
@nerdydad said in Password Managers:
I wrote a how-to on Spiceworks on how to run KeePass on multiple devices a couple of years ago.
This is why KeePass is not even valid for my own personal use. It is too much work to maintain in a completely useful way.
If you have to think this hard to enable this across all devices 100%, then it is not going to be used 100% and that makes it worthless.
But most of that was for the initial setup of KeePass. Something that people typically won't do more than once. You'd have to go through those steps just to use KeePass in the first place.
-
@nerdydad said in Password Managers:
@jaredbusch said in Password Managers:
@nerdydad said in Password Managers:
I wrote a how-to on Spiceworks on how to run KeePass on multiple devices a couple of years ago.
This is why KeePass is not even valid for my own personal use. It is too much work to maintain in a completely useful way.
If you have to think this hard to enable this across all devices 100%, then it is not going to be used 100% and that makes it worthless.
But most of that was for the initial setup of KeePass. Something that people typically won't do more than once. You'd have to go through those steps just to use KeePass in the first place.
You have to maintain a copy of the same DB file across multiple devices. This is more complicated. Always, because you have to ensure that said copy is always fully synchronized.
You have to install a third party app, your chosen sync app, to even use the main password app, which is also third party and not from KeePass itself.
Conversely, I buy a subscription from LastPass or Dashlane and move on.
-
We have keepass for our IT stuff. I'd like to find something that would allow me to create users and dictate which users can see which credentials.
-
@eddiejennings said in Password Managers:
We have keepass for our IT stuff. I'd like to find something that would allow me to create users and dictate which users can see which credentials.
Check out Thycotic when you get a chance. It does require a server and a database, such as Windows Internal Database Server in order to store the passwords, but the DBMS can be stored on the same server as the application as well.
-
@nashbrydges said in Password Managers:
@nerdydad They were pretty clear in that article that free password managers aren't included because they have their own roundup.
So this is only the "paid to be on the list" list.
Is SANS part of Gartner now?
I realize SANS only promoted the publication here, but... really?
-
@jaredbusch said in Password Managers:
@nerdydad said in Password Managers:
I wrote a how-to on Spiceworks on how to run KeePass on multiple devices a couple of years ago.
This is why KeePass is not even valid for my own personal use. It is too much work to maintain in a completely useful way.
If you have to think this hard to enable this across all devices 100%, then it is not going to be used 100% and that makes it worthless.
Have you tried it with Keeweb?
-
@scottalanmiller said in Password Managers:
@jaredbusch said in Password Managers:
@nerdydad said in Password Managers:
I wrote a how-to on Spiceworks on how to run KeePass on multiple devices a couple of years ago.
This is why KeePass is not even valid for my own personal use. It is too much work to maintain in a completely useful way.
If you have to think this hard to enable this across all devices 100%, then it is not going to be used 100% and that makes it worthless.
Have you tried it with Keeweb?
I might have to try that out.
-
It's pretty nice. Both the desktop app and the one built into NextCloud are pretty nice, and compatible with KeePass. So you have lots of options of how to use it.
-
@scottalanmiller said in Password Managers:
It's pretty nice. Both the desktop app and the one built into NextCloud are pretty nice, and compatible with KeePass. So you have lots of options of how to use it.
I have an issue from time-to-time with the one in NextCloud where instead of opening my file, it tries to make me download it.
But I have just gone and done KeePass + NextCloud on all my devices. Problem solved.
-
Have any of you tried Enpass?
-
@kelly said in Password Managers:
Have any of you tried Enpass?
I started using that when KeePassX at the time didn't support KeePass 2 new format.
