Password management for Foundation infrastructure

Looking at it a different way.

What will people need to login to regularly that they’d have to have a shared password for?

I can only think of one and that’s Google or Hootsuite (because then you can have 3 social media channels to manage and it’s also free), where you create a singular ‘dummy’ account that everyone can login to for administration.

Would it be applicable to accessing the contact@hackspace.org.uk address? If so, that makes it important, too.

I think we’re weighing this up against trusting people with passwords, or the convenience of passing them around. Conversely, there’s also revoking access when people no longer become directors/part of a team and shouldn’t have access any more, which it sounds like lastpass simplifies, so there’s one thing going for it.

Lastpass used to be terrible across platforms, my colleague where I work said it worked great across his android to ipad devices and he uses it on desktop. Barring linux which I’m unsure about, this anecdote seems more positive than happenings in the past.

Last pass has been hacked previously, though it seems peoples accounts haven’t been compromised, and frankly these days, everything has been compromised at least once, from Yahoo, to Gmail, to Outlook and even my personal, obscure e-mail accounts.

1 Like