4 ms·

KeepassXC or Keepass by a mile (for corporate uses; decent for personal use too but others are also good for this). I've used both in both personal and corpora

KeepassXC or Keepass by a mile (for corporate uses; decent for personal use too but others are also good for this). I've used both in both personal and corporate settings. Great browser support, Keepass2Android makes my mobile experience good. The reason it's so good for corporate is that the database is just a file, so you can email passwords, or share via one drive or Dropbox or ftp or shared samba drive or ... I worked with techs from Oracle who used to auto generate the database for particular users and share them around. It worked really well for them. Because it's just a file it works for all sorts of workflows. My workplace does pay for Cyberark which is a built for purpose Enterprise application, but I don't have rights to it it or whatever, so I just use KeepassXC.

Legogris 7y ago
The problem with KeepassXC in larger teams than, like, 4 people is the shared secret/keyfile - basically this means that whenever a person leaves you have to change encryption keys and make all users rotate their secrets. Same in case of a leak. With solutions using per-user keys, you just have to revoke/remove keys for that single user. GNU pass (FOSS) and Bitwarden (paid, open source) both do this.
- hau 7y ago
  KeeShare comes with keepassxc allows for sharing secrets with per user control. It's somewhat convoluted but preferable to sharing whole database. https://github.com/keepassxreboot/keepassxc/blob/develop/docs/QUICKSTART.md#user-content-using-sharing https://github.com/keepassxreboot/keepassxc/blob/develop/doc...