HashiCorp Vault vs LastPass for Business

HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.

For any business that is remote - this is an absolute must. Businesses that are brick and mortar that don't have a lot of passwords or not a lot being used across the board, this may not be something a company like that would have a need for. But anything remote or with many employees using logins to outside websites and apps, this is the way to go.

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

• Ability to store multiple different logins for one site for assistants that work under multiple solicitors.
• Ability to share passwords between staff when needed without them being sent by email or simply passed around on notes, making it much more secure.

• Documentation could be better.
• The multiple key unseal process can be a problem if the need arises.
• It would make more sense if HashiCorp Vault combined with HashiCorp Consul to create a unique product.

• It does not work for all platforms. some secure platforms are still managing to avoid the usage of platforms like these.
• Sometimes we add passwords and we have to do it a few times for them to show in the selected folder.
• I have nothing else.

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

LastPass has been a game changer for me. I keep more than 100 passwords for financial sites for my company and many of those sites will automatically log you out if you've been idle for 10 or 15 minutes. Typing and re-typing credentials is not only extremely inefficient, but it also adds the risk that you could type them incorrectly and have your account locked. LastPass fills in all my credentials automatically and helps me to generate secure passwords for new sites. I will always want this software on my machine because it makes my life so much easier.

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

I login to LastPass when I turn on my computer in the morning and I use it throughout the day. I cannot express how much easier, quicker, smoother (running out of adjectives) this is than our old Excel spreadsheet. I don't bookmark pages anymore, I put them in last pass as all I have to do is search for the site name, press launch and because I have auto signin for most of the sites, I'm in and doing my business in seconds. Truly a blessing!

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

LastPass is part of the essential lifeblood of our operations. It's so immensely necessary and useful that I can't imagine doing my job without it. The peace of mind it delivers along with convenience and the constant updates to the latest and greatest features make this product all around amazing. I can't recommend it enough.

Educating users on password management and the basics of the solution is key to then have them successfully start using it themselves. Many have taken it further and now use it for personal passwords as well.

HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.

The has been the first and only password management software that I have used so far, and haven't found a need to change it. I have seen promotions for other software like Roboform and Dashlane but have not had the desire to test how these work because I'm comfortable using Lastpass.

It has been really helpful to be able to evolve how we use LastPass as we grow and change departments, add departments, add personnel, and levels of security. Having some flexibility has been great to get us what we need and not have to change platforms, which for a growing company is always a pain.

• Helped us reach our security compliance goals.
• Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.

• Mitigating MSP compromising is the biggest thing. We have not had a breach before LastPass for Business, and certainly not since. Many MSPs get compromised due to recycled passwords and having them stored insecurely.
• Another positive is that we are a reseller. When we see a client using autofill in a browser, which is insecure, we can offer them this solution, and being users ourselves, helps with the selling points.
• When onboarding new employees, being able to add them to LastPass for access already conditions them that this is the only way to manage passwords for our customers. This mitigates, if not fully eliminates, the possibility of security breaches.