HashiCorp offers Vault, an encryption tool of use in the management of secrets including credentials, passwords and other secrets, providing access control, audit trail, and support for multiple authentication methods. It is available open source, or under an enterprise license.
$0.03
LastPass for Business
Score 8.3 out of 10
N/A
LastPass is a password management application to simplify access to enterprise applications for users but also increase centrality and ease of management of access for administrators with task automation, convenient and secure password sharing, and other features.
HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.
Honestly, I cannot think of a scenario where LastPass is less appropriate for business use. LastPass has done nothing but help me complete my day to day work in a much more efficient manner. Due to LastPass I no longer have to try and remember my user IDs and password and I save time by not having to type the data into the user ID and password fields. This is exceptionally helpful for me as I work in IT/Software Support and I am logging in and out of the same websites numerous times a day.
HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.
LastPass has been a game changer for me. I keep more than 100 passwords for financial sites for my company and many of those sites will automatically log you out if you've been idle for 10 or 15 minutes. Typing and re-typing credentials is not only extremely inefficient, but it also adds the risk that you could type them incorrectly and have your account locked. LastPass fills in all my credentials automatically and helps me to generate secure passwords for new sites. I will always want this software on my machine because it makes my life so much easier.
We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.
I login to LastPass when I turn on my computer in the morning and I use it throughout the day. I cannot express how much easier, quicker, smoother (running out of adjectives) this is than our old Excel spreadsheet. I don't bookmark pages anymore, I put them in last pass as all I have to do is search for the site name, press launch and because I have auto signin for most of the sites, I'm in and doing my business in seconds. Truly a blessing!
Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.
Haven't had to directly contact support all that much (at least not me personally, I don't know that anyone else on the team has needed to) but the Help Desk options/resources and documentation available are enough to answer any questions, although for what it's worth, the contact support options are not hard to find, and aren't hidden like some sites have it. Additionally, free new user training is offered for those who want it.
Educating users on password management and the basics of the solution is key to then have them successfully start using it themselves. Many have taken it further and now use it for personal passwords as well.
I use LastPass for Business has a user as it has been chosen by my company. If I have to compare with other tools that I use for personal reasons like KeePassXC I consider LastPass well integrated, I don;t find the same good way with the other tool I just mentioned.
Access levels and the organization features in LastPass are so flexible that you can set up your structure to work for virtually any scenario. You can also prevent employees from being able to see the actual credentials, which is huge for security, especially in large companies.
