Pros<p><pre><code> - free open source
- group management can be delegated
- works fine with mac, linux & windows browsers
- maintenance free self hosted on k8s for 2 years
- lack of mobile apps has not been issue
- UX is ok, no complaints
- requires little end-user support</code></pre>
Cons<p><pre><code> - only password field is encrypted
- no warning that Notes are not encrypted
- promises ‘Secure files & notes (Coming soon)’
for more than year
- password generator has no complexity options
- requires browser plugin
- user passwords have no minimum entropy requirements
- no helm chart, used our own
</code></pre>
Experience based on free version with ~75 users. Plan to switch to paid version when <i>Secure files & notes</i> become available.<p>Noticed that former lead developer <a href="https://github.com/markstory" rel="nofollow">https://github.com/markstory</a> now works on Sentry. Sentry has same list of <i>Pros</i> as above: it ’<i>just works</i>’ without maintenance or support, running self hosted on k8s for free.
I like this a lot. I've been a Bitwarden user for the past few months and I'm not looking back, but I'm so happy there's reasonable competition:<p>- It's still OSS, so you can self-host, which is a big selling point for me<p>- There's a managed/hosted option, which is a big selling point for probably <i>most</i> users<p>- It's got a browser plugin à la BitWarden/1Password, which is a crucial feature for any well-polished password manager (and hopefully it also comes with Android autofill integration)<p>Hopefully Passbolt, BitWarden and others can keep eachother on their toes and help this be an innovative and widely accessible space!<p>Expanding on that last point: I'm a <i>huge</i> fan of the general idea of having the option of self-hosting with a business model revolving around a paid, managed option, for password managers or otherwise.
heh, i know a guy that will be having rage-fits of the use of "on-Premise" on their web site...<p>Premise:<p>noun
/ˈprɛmɪs/
LOGIC
a previous statement or proposition from which another is inferred or follows as a conclusion.
"if the premise is true, then the conclusion must be true"
verb
/prɪˈmʌɪz/
base an argument, theory, or undertaking on.
"the reforms were premised on our findings"<p>Premises:<p>noun
a house or building, together with its land and outbuildings, occupied by a business or considered in an official context.
"the company has moved to new premises"
My team has been using this for over a year. It's been my favorite answer for this problem-space. I love the self-hosted part (which means I also get backups I can trust). It's trivial to put inside a VPN for added security. It's security reviews were good and built on standard tools (so maybe if PB is dead I could recover outside?). Just save the key you download when you setup or your hosed!<p>Which reminds me, I've been meaning to make a plain-text archiver for this -- to print out secrets and put them in my safe.
Why would I pay at least 450 euro per month for something I have to run myself? I appreciate that support and maintenance costs are certainly something to pay for, but a high monthly charge when I'm taking all the risk, and paying for the hosting immediately turns me off.<p>Especially considering the 4 hour SLA on phone support for the enterprise version. If the password management system is down, work stops. I'd rather not have to break the glass on the emergency god account at all.
As a small dev team we needed something similar to passbolt, but that would primarily be used for sharing API keys and other application secrets for our code base. (Although we use it for other passwords as well) A lot of the existing tools are fairly complex to setup and are not tied to identity management systems. (i.e. You have to setup and maintain separate user accounts)<p>Since, we were on Keybase already for employee identity and chat, we created an extension to encpass.sh to use Keybase for our secret storage. (<a href="https://github.com/plyint/encpass.sh/blob/master/extensions/keybase/KEYBASE.md" rel="nofollow">https://github.com/plyint/encpass.sh/blob/master/extensions/...</a>) It has been working really well so far, as when we add someone to a Keybase team, that person immediately has access to that team's secrets. No extra setup required.
We have been considering it in our team but the lack of capability of creating a "shared vault" and connecting it to a centralised AD/LDAP identity was a no go for us. Also, the lack, due to the tech itself, of a recovery method for users and administrator (with audit of course) was a big disapointment.
PS : never connect it to your AD/ldap or it will spam everyone in your organisation by default ! #lessonlearned
You just need git, ssh and pass (<a href="https://www.passwordstore.org/" rel="nofollow">https://www.passwordstore.org/</a>), see <a href="https://fr.jeffprod.com/blog/2019/gerez-vos-mots-de-passe-avec-des-logiciels-libres/" rel="nofollow">https://fr.jeffprod.com/blog/2019/gerez-vos-mots-de-passe-av...</a> (french)
pass[0] has been the best of everything so far. gpg based and easy to use with keyboard shortcuts. i like alternatives like htis, but pass is super barebones and highly available.<p>[0]: <a href="https://www.passwordstore.org/" rel="nofollow">https://www.passwordstore.org/</a>
I feel like this is becoming a very crowded market. What sort of differentiation separates this service from the pack?<p>For my purchasing decision, I’d lean heavily on the probability the service will be there in 5 years (it’s obvious I’m getting older I guess), as the market seems pretty mature.
This one doesn't have any limitations, and can use LDAP/AD. Along with it, you can use NextCloud other features:<p>* <a href="https://git.mdns.eu/nextcloud/passwords" rel="nofollow">https://git.mdns.eu/nextcloud/passwords</a>
Slightly off topic: I love this tag line under "Methodically tested"<p>> Half of the code base is there to make sure the other half is behaving.
Hmm, this is the kind of software I'd sooner the developer have a liability for rather than "You get what you pay for" when my passwords are leaked.
> Self hostable, open source, password manager for teams<p>One of my teams shares passwords as well. We use KeePass over WebDAV. Works for us. I fail to see the market niche here.
Is there a web API for changing passwords? Would be nice if these passwords managers could help you change passwords when they are found on a list through an API (that would require the old password anyway).