1Password vs HashiCorp Vault

I've described how I use it to manage confidential client logins for the websites I develop for them. Every site has a myriad of things that need logins - from setting up their domain name and hosting, to building the WordPress site, to getting them set up with email and maintaining their sites. When I need to provide IT support to our staff, I have my phone right there to log in to their computers to address the issues. When I want to order cookies from Amazon or check my home's security camera settings, it's there for personal needs as well. There are sharing features that I haven't explored enough to be comfortable with setting up for staff. They may be just great, but it is a place where I personally don't make use of the program.

HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.

• 1Password's Watchtower service is a real value add - 1Password monitors the security news for evidence of security breaches containing your credentials and alerts you if you have been impacted. That is a huge value as it enables you to get out in front of a security breach and be proactive in protecting yourself.
• 1Password's core strength is that it makes it easy to practice good security hygiene by using strong, unique passwords for each site you interact with. This is something that all password managers do now, but offering an easy experience is key.
• 1Password's password sharing features makes it easy to share team credentials with other team members, and to decide who amongst the team gets access to the designated credentials.

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

• 1Password is so secure, that it lacks a self-managed "forget your password" functionality which means that as a manager, I have to approve password resets which may slow down some users.
• On Chrome, the extension sometimes stops working when the browser is updated.

• Documentation could be better.
• The multiple key unseal process can be a problem if the need arises.
• It would make more sense if HashiCorp Vault combined with HashiCorp Consul to create a unique product.

Its simplicity and vast functionality provide a solution to a former pain point for our organization. As long as 1P exists, we'll be customers.

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

The 1Password app design is top notch, much better than a couple other password managers I've looked at. The app and service are very flexible, allowing for many different types of data storage. The browser extensions generally work very well, allowing for easy access to login information while using pretty much any modern web browser.

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

I have never had any issues with 1Password and they have always been able to answer my questions adequately resolve my issues. Furthermore, they have a robust peer forum that can be accessed. They have helpful "Get to know Apps", videos and many articles to assist in the process of using the product.

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Outside of 1Password, we used built-in browser password managers (Chrome, FireFox) to keep track of multiple different passwords. While this was fine, it did not allow for a scalable solution which we could easily use across the organization. We found 1Password to be a superior solution which allows for us to accomplish keeping track of multiple passwords in a more effective way.

HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.

• It saves time, and time is a very expensive resource.
• The account details and the sensitive business information in safe behind the 1Password encoding, while staying accessible to stakeholders
• The password generation is a secure and quick way to help employees register new services on their own.

• Helped us reach our security compliance goals.
• Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.