4 ms·
You can also use other password safes (sometimes called vaults) that are multi-platform. A password safe is an encrypted database that allows you, and your team
by WestCoastJustin 13y ago
You can also use other password safes (sometimes called vaults) that are multi-platform. A password safe is an encrypted database that allows you, and your team, to securely store and share passwords. Basically, it is a free piece of software that is cross platform (win, mac, linux), a common workflow would be to store it on a shared drive, and give your team access, they use a common password to access the safe, which holds the other passwords. Create multiple safes if you need segregation i.e. dev safe, sysadmin safe, network safe, etc. I have created a screencast about this @ http://sysadmincasts.com/episodes/7-why-you-should-use-a-password-safe http://sysadmincasts.com/episodes/7-why-you-should-use-a-pas...
Personally, I would not recommend any of the cloud based solutions, for the simple fact, that any slip up in their security and you are hosed. These are your crown jewels, do not outsource this!
UPDATED: sentence structure.
- dchest 13y ago"Also"? 1Password is a "password safe". EDIT: with your edit everything now makes sense :)
- doppel 13y agoYes, but 1Password is not support on Linux though there is a work-around so you can atleast access the passwords but not save new one. I think that's what he is referring to.
- zachlatta 13y agoAs far as I know, 1Password has Linux support. It's a browser plugin, not a native application. I'm using it right now on Arch.
- chmars 13y ago1Password does not support Linux. Password Anythere (1Password 3), however, can be used with Linux of course: http://help.agile.ws/1Password3/1passwordanywhere.html http://help.agile.ws/1Password3/1passwordanywhere.html
- zachlatta 13y agoAh, my mistake. I was confusing LastPass with 1Password.
- rehevkor5 13y ago"any slip up in their security"? We aren't talking about storing plaintext passwords in a database here. They should be storing and sending/receiving encrypted data only. It would most likely be necessary to compromise the client in order to gain access... in which case it makes no difference whether you're using a cloud-based service or not.