Hacker News Reader

Comment by LordHeini | Hacker News Reader

At our company we use keepass2 with a db file synced by dropbox. Works nicely. Keepass can save all sorts of stuff alongside passwords (like credentials, api-tokens...) and there is an app too (for android at least). Might get a bit clunky if lots of people change a lot of stuff all the time but for us it is not a problem.

View on HN

That's what I use as well. Only thing missing I guess is a mobile workflow, though there are some options.

We use https://www.pwsafe.org/. It has clients for android, iOS and windows. In Mac and Linux you can use password-gorilla with the same files. And sync with dropbox.

There are other clients such as iOS and MacOS by App77 -- is there any validation of that companies implementation of pwSafe?

as mentioned above, saving to synced cloud storage gives multi device access, and so long as your mobile platform has clients for both your storage and keepass, you are good. Although you do need to reopen/resync after any changes since the client at location 2 might not be aware of the changes propagated through cloud storage by the client at location 1

Can Keepass2 have different passwords for different users?

Or are you sharing one master password among multiple employees?

Each store is a file with a single, changable password (+ option for additional external keyfile).

Create as many or few of these as you need accordingly.

KeePass isnt really designed for multiuser usage, RBAC, etc

]

Does anyone at your company use iOS? If so, how are they doing it?

I use iOS with Keepass1. Not sure how you can do it with Keepass2 without converting the thing over and over.

Not sure what you mean by 'converting over and over' but MiniKeePass on iOS supports both 1.x and 2.x file formats. You do have to import the file from dropbox manually, however.

On iOS I use KeePass Touch. It syncs with Dropbox, and allows you to unlock the database with your fingerprint. At the time I searched, it was one of the only apps that fit these two requirements. Still works fine.

Reply on news.ycombinator.com