3 ms·

Pretty key to have high quality mobile apps. Another big use case is having my teams be able to share passwords. Highly useful to be able to have access groups

Pretty key to have high quality mobile apps. Another big use case is having my teams be able to share passwords. Highly useful to be able to have access groups like "team" (everyone, things like Zendesk) "team-secure" (stuff with CC's, like Amazon), "dev" (general dev accounts), and "dev-secure" (compose.io access and the like). Makes it way faster to onboard new folks, and when people leave, to cleanly strip access and change passwords. The open source tools don't solve for those kinds of use cases, as far as I know. Just "I have one computer, and want to store my passwords on that one computer."

coldpie 11y ago
Sure, but now you're trusting your entire infrastructure to a black box which can be passed around to anyone with enough money. There are trade-offs, and you have to consider everything when comparing features, including the license. Also, no way I would do anything important on my phone. These things seem to be about as secure as sieves.
TimJRobinson 11y ago
We're looking for the exact same thing, mobile apps and team management. I've yet to find any open source software that does team management. Even multiple open source tools that work together to create this functionality would be great.
Keats 11y ago
Doesn't solve the mobile apps part but we run https://passopolis.com/ https://passopolis.com/, a continuation of Mitro (https://www.mitro.co/ https://www.mitro.co/) that shutdown a couple of days ago. The server and the chrome/firefox extensions that are opensource (https://github.com/WeAreWizards/passopolis-server https://github.com/WeAreWizards/passopolis-server, https://github.com/WeAreWizards/passopolis-extensions https://github.com/WeAreWizards/passopolis-extensions). Right now it's mostly for us and other mitro escapees to continue using it so we didn't bother with the site design or the mobile apps. The exact feature you mention would be the first one to be done if we decide to monetize it though ! It would say opensource as well.
WorldMaker 11y ago
You could easily store KeePass database files on a network share. Create one file per access group, for instance. KeePass works pretty well with multiple database files (it has a simple tabbed interface when you do so and you can do things like color code the icons in the tabs). You can use network share permissions to make the database files read-only to particular users and KeePass will do the right thing with read-only files (mark it as read-only in the UI and disallow editing actions).

coldpie 11y ago

Sure, but now you're trusting your entire infrastructure to a black box which can be passed around to anyone with enough money. There are trade-offs, and you have to consider everything when comparing features, including the license. Also, no way I would do anything important on my phone. These things seem to be about as secure as sieves.

TimJRobinson 11y ago

We're looking for the exact same thing, mobile apps and team management. I've yet to find any open source software that does team management. Even multiple open source tools that work together to create this functionality would be great.

Keats 11y ago

Doesn't solve the mobile apps part but we run https://passopolis.com/ https://passopolis.com/, a continuation of Mitro (https://www.mitro.co/ https://www.mitro.co/) that shutdown a couple of days ago. The server and the chrome/firefox extensions that are opensource (https://github.com/WeAreWizards/passopolis-server https://github.com/WeAreWizards/passopolis-server, https://github.com/WeAreWizards/passopolis-extensions https://github.com/WeAreWizards/passopolis-extensions). Right now it's mostly for us and other mitro escapees to continue using it so we didn't bother with the site design or the mobile apps. The exact feature you mention would be the first one to be done if we decide to monetize it though ! It would say opensource as well.

WorldMaker 11y ago

You could easily store KeePass database files on a network share. Create one file per access group, for instance. KeePass works pretty well with multiple database files (it has a simple tabbed interface when you do so and you can do things like color code the icons in the tabs). You can use network share permissions to make the database files read-only to particular users and KeePass will do the right thing with read-only files (mark it as read-only in the UI and disallow editing actions).