Enterprise grade password solution... with a few shortcomings.
January 04, 2019
Enterprise grade password solution... with a few shortcomings.
Score 5 out of 10
Vetted Review
Verified User
Overall Satisfaction with Secret Server
We use Secret Server enterprise-wide as the source for all password administration. It generally (but not always) generates our passwords, so as to maintain password complexity. We use it to securely share passwords between administrators and users. On a personal level, I use it for my personal passwords as well. It keeps them secure, albeit on our corporate hardware.
- Recommends complex passwords.
- Interfaces with our Identity Management software to already know users. No extra passwords needed.
- Ability to track additional information such as system, resource and even notes on a password.
- The sharing functionality NEEDS improvement. We share most passwords at a group level, but then it becomes impossible to share them with a dynamic group and one or two one-off people as well. This is a major shortcoming.
- I don't love the interface. I feel like there is an attempt at a dashboard, but it is really not effective.
- I've heard, but never seen, that the software can actually change passwords in the target systems. If this is part of its deliverable, I do not know how to use it, and I don't know how you would do that. Seems like a great feature for password management.
- Helps share passwords securely. One cannot put a monetary value on security these days since the cost of a breach can be catastrophic.
- Helps ensure password complexity. It forces us to maintain complex passwords and even randomly generates them for us.
- I feel that a person who changes roles often could still have access to many passwords that have been assigned to them manually. The administration of this is time-consuming and very inefficient.
I've only used simple phone apps for this before. This is the only enterprise-grade solution I've used in this space. Given THOSE options, Secret Server is a fantastic solution. I still feel like there is a better interface out there somewhere.