Home / server / Questions / 288290
Accepted
Pitto
Asked: 2011-07-09 05:07:01 +0800 CST

Store office passwords safely

  • 772

I have a customer with various computers and hardware devices that have admin passwords. There's no active directory so each computer / device has its own password.

I would like to store those password with a secure system on their LAN.

Even an excel file with cipher would be ok but I look for better suggestions (of any kind for linux or windows).

Online services and paid applications are not interesting.

password

6 Answers

  1. A popular solution for small and medium business is KeePass, which is free and available for many platforms.

    • 8
  2. Best Answer

    One thing to be concerned with using Excel is that it will create temp files when the decrypted files are opened. That file will exist as long as Excel is open and if it crashes for any reason, that temp file will be left on the system decrypted. So it is certainly a good idea to look for alternatives.

    We are just starting to use Manage Engine's Enterprise password manager I don't have a whole lot of experience with it, but it seems to do the right thing as far as separation of permissions, and logging for who got what password when.

    Edit: Missed the "not interested in paid options" bit. Perhaps using something like KeePass would work for you then.

    • 7

  3. I personally use 1Password for home/lab stuff - there's loads of other products though but I like that enough to have not really looked around for others, not sure if it'll meet your/their needs but just thought I'd mention it.

    • 6

  4. Do they have a safe? There's your secure system! jk! :D

    • 3

  5. Another neat option is called corporate vault google it on sourceforge. It can tie into ldap if you want to and it is web based. Another neat feature is that you can assign roles to users and groups.

    • 1

  6. If for whatever reason you don't want to use KeePass (which is an excellent program), Password Safe is another excellent free option.

    They don't have any multi-user support to speak of, but I know that pwSafe will allow others to open a DB in read-only mode if someone has it open for read/write. I've never tried doing the same thing with KeePass, so I'm not sure of its behavior.

    Finally, if you need compliance with a particular set of regulations (PCI, HIPPA, etc.), then you may need to look elsewhere or pay the $$$ to get them certified yourself.

    • 0