HashiCorp offers Vault, an encryption tool of use in the management of secrets including credentials, passwords and other secrets, providing access control, audit trail, and support for multiple authentication methods. It is available open source, or under an enterprise license.
$0.03
LastPass for Business
Score 8.3 out of 10
N/A
LastPass is a password management application to simplify access to enterprise applications for users but also increase centrality and ease of management of access for administrators with task automation, convenient and secure password sharing, and other features.
HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.
For any business that is remote - this is an absolute must. Businesses that are brick and mortar that don't have a lot of passwords or not a lot being used across the board, this may not be something a company like that would have a need for. But anything remote or with many employees using logins to outside websites and apps, this is the way to go.
HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.
LastPass has been a game changer for me. I keep more than 100 passwords for financial sites for my company and many of those sites will automatically log you out if you've been idle for 10 or 15 minutes. Typing and re-typing credentials is not only extremely inefficient, but it also adds the risk that you could type them incorrectly and have your account locked. LastPass fills in all my credentials automatically and helps me to generate secure passwords for new sites. I will always want this software on my machine because it makes my life so much easier.
We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.
I login to LastPass when I turn on my computer in the morning and I use it throughout the day. I cannot express how much easier, quicker, smoother (running out of adjectives) this is than our old Excel spreadsheet. I don't bookmark pages anymore, I put them in last pass as all I have to do is search for the site name, press launch and because I have auto signin for most of the sites, I'm in and doing my business in seconds. Truly a blessing!
Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.
LastPass is part of the essential lifeblood of our operations. It's so immensely necessary and useful that I can't imagine doing my job without it. The peace of mind it delivers along with convenience and the constant updates to the latest and greatest features make this product all around amazing. I can't recommend it enough.
Educating users on password management and the basics of the solution is key to then have them successfully start using it themselves. Many have taken it further and now use it for personal passwords as well.
The has been the first and only password management software that I have used so far, and haven't found a need to change it. I have seen promotions for other software like Roboform and Dashlane but have not had the desire to test how these work because I'm comfortable using Lastpass.
It has been really helpful to be able to evolve how we use LastPass as we grow and change departments, add departments, add personnel, and levels of security. Having some flexibility has been great to get us what we need and not have to change platforms, which for a growing company is always a pain.
Mitigating MSP compromising is the biggest thing. We have not had a breach before LastPass for Business, and certainly not since. Many MSPs get compromised due to recycled passwords and having them stored insecurely.
Another positive is that we are a reseller. When we see a client using autofill in a browser, which is insecure, we can offer them this solution, and being users ourselves, helps with the selling points.
When onboarding new employees, being able to add them to LastPass for access already conditions them that this is the only way to manage passwords for our customers. This mitigates, if not fully eliminates, the possibility of security breaches.
