HashiCorp Vault vs LastPass for Business

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Read full review

• Encourage good passwords: with the ability to easily generate a good, secure password that doesn't need to be typed in moving forward, it encourages users to have good passwords since they don't need to think of them and then remember them later on.
• Credential sharing: with the team solution it is very easy to share credentials when needed and revoke access when complete without ever revealing the password.
• Browser integration: the browser plugin makes it easy to use as it is always available whenever a password/login is required.

Read full review

• Documentation could be better.
• The multiple key unseal process can be a problem if the need arises.
• It would make more sense if HashiCorp Vault combined with HashiCorp Consul to create a unique product.

Read full review

• Roles - The roles are relatively new and the idea behind them is good. The only thing that I want to be able to do is give the admins of other systems access to use the push sites to users feature. That way when non-IT people are creating accounts for other systems they can push the accounts in without sending to IT to do.
• Pricing - We have had massive pricing increases each year since we brought it in. They say it is because they have implemented so many new features, which is fair enough except we don't use many if any of the new features. If they could bring in a modular pricing model so we can pay for the base system and then purchase any required add-ons we use, that would be much more beneficial for us. We nearly had to scrap the system this renewal simply because the price had quite literally tripled since the first invoice.
• Update Username - I came across an issue with our environment as we have multiple email domains that when a user moved departments and their domain changed in AD, it would break the LastPass connection between them. It must identify on an email level as opposed to some kind of GUID. When we wanted to update the usernames of everyone to a generic domain to mitigate this problem. We had to do it manually with each user as there was no way to do it from the console.

Read full review

• Helped us reach our security compliance goals.
• Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.

Read full review

• Enabled easy, more secure sharing of information and logins across the organization.
• Streamlined IT processes: one login for LastPass lets you access all your logins (instead of remembering multiple logins for different sites).
• Similarly, mobile access makes it easier to share/access information while on-the-go, making it a perfect business solution.

Read full review