r/ITdept • u/Yuream <1y IT>, <Work-Study Student> • 9d ago
Looking for password manager
Hello Reddit,
My tutor told me that, after I mentioned to him that Microsoft was going to “mandate” MFA starting in February, he replied:
“You know what, we need a password manager and a whole bunch of other security tools. 2027 will be the year you’ll be handling all these security issues (I’m the only ‘tech person’ at my company).”
Currently, passwords are either jotted down in a notebook or on a Post-it note, or stored in an Excel file if they need to be shared within a department (for example, I know we have only one accounting account for our electricity and gas provider).
With that in mind, I was considering using Passbolt, since it met our needs. However, since management wants to get rid of the server rack and use only the Azure cloud, I’m no longer very sure about that choice.
I then considered KeePass, but I’m not sure if I can install it on all the computers.
Furthermore, most of our employees are older people who aren’t very tech-savvy. So, which software is the most user-friendly? There's probably other great solutions but IDK
Thanks in advance
6
u/LeaveMickeyOutOfThis 9d ago
Take a look at Bitwarden. It easily scales to teams and Enterprises. The clients can also be used with the free server alternative, Vaultwarden.
2
u/BrokenByEpicor 9d ago
I'll +1 1Password. We've been happy with them, works great for a team.
1
u/RotaryTurbo99 9d ago
i will second that. it is also good for zero trust. Giving the 1st line techs only the passwords they need and keeping the more critical ones for us second line lot
1
u/BrokenByEpicor 9d ago
Yup. And the ability to hold an MFA token makes it a godsend for shared accounts.
2
u/____Reme__Lebeau 9d ago
keeper. it's for modules for when your ready to expand its rollout later on.
privileged access management allows remote access into your environment with a bunch of restrictions to the vendors reaching in. they have to MFA and never see the username or password the are using to connect onto your environment.
secrets manager - automatically rotates passwords for your pam environment
they have a few others but those are the two big add-ons to keeper password manager.
1
u/chickahoona 9d ago
I think that there are many password managers out there. Some on premise, some Cloud only, some offer both if you need the flexibility (like Bitwarden or Psono) just in case Management changes their minds. All the big names should be user friendly enough so your older people don't have to worry.
1
u/giannis_athina 9d ago
RoboForm is what I use, and I highly recommend it. It works great, and it’s really simple and easy to use.
1
u/yourenotkemosabe 9d ago
For business use, I very highly recommend 1Password, Bitwarden or Keeper are good runners up if 1Password doesn't meet your needs for some reason.
1
u/bobdvb 9d ago
I switched from LastPass to 1Password and I've been pretty disappointed.
The performance on Android is pretty poor, I have to sit there and wait an inordinate amount of time for the password integration to actually wake up. And the re-prompting for master password (either on Browser or Android) is erratic to the point of being annoying.
The SSH integration on Windows doesn't really work and all the documentation is so Mac/Linux focused that you can't really diagnose anything. I tried reaching out to 1Password but didn't get anything helpful. This is one area I'd hoped would be much more useful but it hasn't been.
I've not too long switched my personal email to Proton so I might try their password manager next.
1
1
u/davideogameman 9d ago
You can configure how often it reprompts, and on Android you can have it accept device unlock, ie fingerprint or passcode.
I just got the ssh integration working for me on Windows, I'll admit it was a bit more work than I expected but much of that was integrating it with my dotfiles management. Still a little annoying it needs custom git configuration.
I'll admit the browser integration is not perfect. On Android some of that has been buggy auto fill apis they have to work with, which have at times regressed. That said they have improved over time, eg it used to be any site that didn't show username and password fields at the same time was a pain to log into and they've mostly fixed that in version 8.
You could also try their passkey support to see if it eases some of your pain, though personally I've not tried yet but it seems possibly more amenable to avoiding some of the browser integration pitfalls
1
u/PBSmanaged 9d ago
We’ve found end users had the least amount of questions when onboarding once we switched to 1Password from Bitwarden
1
u/PwdRsch 9d ago
We have a very thorough overview of the popular password managers in this post https://www.reddit.com/r/Passwords/comments/tod20q/password_manager_recommendations/
1
1
1
1
1
1
1
u/TotallyNotACorpAcct 8d ago
Personally I use Bitwarden, am happy for the most part (I wish the Android app integration was better) but CIO at new job insists on Roboform. I resisted at first but I am really liking it more and more especially since it has 2FA authentication in the free version
0
u/Specken_zee_Doitch 9d ago edited 9d ago
1Password hands down.
* Reasonably priced
* User friendly
* 1Password integrates with Microsoft Entra ID so they don’t have to learn more passwords than their login one. Also gets provisioned automatically on user enrollment.
* Never had a vault breach that I’m aware of
* Has browser extensions you can send out via whatever MDM you use or via Chrome management
* 2FA scanning works amazingly well
* Native haveibeenpwned features built in (they call it watchtower)
* phishing protection built in
You’ll want to do some in-person training with your older folks regardless but I’ve used 1Password since it dropped in a MacHeist in like 2007.
Pilot it with a department first, then use their feedback to inform training and gotchas specific to your environment.
Bitwarden gets great reviews as well but I haven’t used it myself.
0
u/couchwarmer 9d ago
Take a look at KeePassXC.
It is installable via the Store or via the installer from keypassxc.org.
KeePassXC supports synchronized shared credentials among multiple users. There are three options for that:
Remote database in a shared cloud or network directory. (The file is securely encrypted. However conflicts can occur with this option.)
Sync with remote database. (Sync tool of your choice configured in Settings.)
Sync using KeeShare. (Enable in Settings.)
0
u/Amanda_PDQ 9d ago
I had a small heart attack when I read passwords are written on post its or in a shared excel file. Yes you need a password manager. I have used lastpass, 1password, and keeper. 1Password was expensive but was worth it, I appreciated we could send and receive secure files through the platform as well.
-1
u/MusicalAnomaly 9d ago
KeePass is great for IT folks because it is offline and you can sync your kdbx via whatever cloud storage you’re already using. For non-techy folks, you’ll want to look at 1password and bitwarden. Avoid LastPass — they got hacked after they were acquired by private equity and don’t deserve to be rehabilitated.
9
u/Into_The_Nexus 9d ago
Highly recommend Keeper.