#Vault password manager npm windows#

The vaults have a password, everyone using it needs to know the password, and everyone gets access to everything. You can do something like store KeePass or 1Password in Dropbox, but it has issues.

There are things like admin passwords that teams need to share (as bad as it is to share passwords, there are a lot of cases where there isn't another option). Things like KeePass and 1Password don't scale well for teams/businesses. I think the FAQ does a good job of explaining it, basically it is for teams: Well, everything depends on the threat scenarios you consider. Use of ecryptfs/encfs or git-remote-gcrypt was suggested to mitigate this, but those aren't perfect. Run `ls -lR ~/.password-store` if you don't believe me )

what you see in the very first example at in the 'Using the password store' section are the actual at-rest filenames. On the bad side, anyone who has access to the filenames (local filesystem access or a clone of git repo) can figure out which resources you have credentials for. Also, this architecture allows dead-simple (plain rsync or git!) approach for synchronization when there are no entry-level conflicts. On the good side, you don't have to decrypt anything (which means, actually use your GPG key, which is best kept on an unplugged HSM) to just check if the credential's in the store (think auto-fill suggestion). However, the filenames are not encrypted or obfuscated by any means. With pass (just to be sure - we're talking about zx2c4's one, right?), the store contains a bunch of independent gpg-encrypted text files. but that interface also left much to be desired.

#Vault password manager npm windows#

There's Thycotic but I don't think their Cloud version supports password changing (and I'm not interested in running a Windows server). Dashlane has some notion of password resets but there's no control to script it for your own or client websites. I really wish I could find a decently priced company credential/identity manager that can assist with things like automatically rotating passwords/access so I can more easily prevent staff from copying passwords into an unencrypted file, and get an audit log of who's accessing what. I might end up going with LastPass for the more granular permissions.

No 2FA either, which they have their reasons for. I'm waiting for them to add individual item permissions and the ability to create custom groups. Looks like the pricing is going to be $5/user/month for 1PW. You can see several questions about this issue in the forums. Eg, Marketing & Finance vaults have overlapping users, so you create a Marketing/Finance vault, and so on. This makes it really cumbersome with overlapping groups that results in vault explosion. The team sharing within Dashline leaves much to be desired, even sharing of multiple items at a time is a bit rough, and I couldn't find a way to create vaults/groups.ġPW has a notion of vaults for grouping data, but anyone with access to the vault can see all of the credentials. 1PW has much more functionality around teams from my experience. I've recently experimented with Dashlane for Teams and been using 1Password Teams.