Ask HN: Password management strategy for non-profit school?
I'm trying to implement a robust password management strategy for a small non-profit school, and I'd like you suggestions.
A volunteer board of 4-8 people rotates yearly. If we're lucky, some members serve two consecutive years and there's continuity. Some years, the board is lousy and can't be counted on to transition duties responsibly.
There are about a dozen passwords (not currently consolidated in a single place) that need to be passed from one board to the next. Not every board member needs access to all the passwords (varies based on role).
We'd want certain people like the school admin and director to have access, as well as one or two long-term supporters of the school, who serve to preserve continuity in case the board fails to do so.
I've looked into solutions like Lastpass and Onelogin, but these cost ~$5/month/user and don't provide discounts for non-profits. For us, that's about $60/month, and I'm wondering if that's the best solution?