Looking for secure way to share passwords

[Michael Butash]

At work we use "password safe" to share common passwords like service 
accounts, shared vendor accounts, and various other credentials that are 
not unique to a member. It's kind of a kludge, and of course windoze 
only, so I have to use vm to access it. quite annoying.

I've considered pushing to use keepass instead, as I've used this as 
well for a good 6 years under linux.  Only problem is it's only a file 
db to be accessed, which makes anyone not on a shared network resource 
accessing it difficult.  Also sadly, even the "official" version 
iterated to keepass2, a really crap c#/mono application that barely 
works under linux, and not without frustrations, but older 1.x format 
with keepassx works great.

I have since migrated to LastPass, even paying for the service because 
I've found it to be more valuable than the $12 a year personally, and 
their "enterprise version" can have shared access permissions.  Perhaps 
the consumer version can be coaxed to do this too, but I've not had 
necessity to try.  The android integration with dolphin browser (plugin) 
makes it easy on any platform, mobile or desktop for consistent access 
means.

Secure shared access for me is a random large/complex string that I note 
as who I've given it to, and only as long as needed before changing it.  
I don't remember passwords, preferring the ambiguity that if I can 
remember it, likely others can brute-force it, or torture it out of me.

Of course any service like lastpass inside the US, the NSA would simply 
subpoena and force to give unilateral access to my account anyway (much 
as they can/do anyone, thank your politicians) at that point, so really 
confidentiality is all a perception regardless as long as anything is 
shared externally.

-mb


On 10/26/2013 02:31 PM, Eric Cope wrote:
> I use lastpass, although not to share... I can help demo it if you want...
>
> Eric
>
>
> On Sat, Oct 26, 2013 at 2:20 PM, Mark Phillips 
> <mark at phillipsmarketing.biz <mailto:mark at phillipsmarketing.biz>> wrote:
>
>     I have a small team, and I am looking for a way to share account
>     info - user names and password, and password updates. These are
>     login credentials for financial accounts I manage.
>
>     I googled for some ideas, and came up with snail mail, various web
>     services that encrypt/decrypt emails, Lastpass, and safegmail.
>
>     The users are technical noobs, so it has to be easy. No software
>     to install. Free or inexpensive. They use Windows and Mac, I use
>     Linux. Only I use Gmail, so safegmail is out.
>
>     Does anyone have any recommendations for web service solutions?
>     Anyone use Lastpass? Other ideas?
>
>     Thanks,
>
>     Mark
>
>
>     ---------------------------------------------------
>     PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
>     <mailto:PLUG-discuss at lists.phxlinux.org>
>     To subscribe, unsubscribe, or to change your mail settings:
>     http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>
>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.phxlinux.org/pipermail/plug-discuss/attachments/20131026/d6a55693/attachment.html>