2

I am trying to find a password manager that I can use in a work environment. The basic requirements are that no client side USB drive or software installation can be required (but a file for the password database can be stored). This includes browser extensions, but bookmarklets can be used. Cellphones are also not authorized, so a solution that depends on access to a cellphone based authentication is also not tenable. I have a personally controlled server that can be used to host the server side of a self-hosted solution. Are there any proven solutions that allow for this?

  • 1
    No installations, but can you run an arbitrary executable (without admin rights)? Or are those blocked? – Ben May 5 '17 at 14:35
  • No, while it's not locked out, it's not authorized. – jgd May 5 '17 at 16:41
  • 1
    How about USB devices? Can you plug in an arbitrary personal USB device or is that also prohibited? – Ben May 5 '17 at 20:20
  • No, if it's not employer provided it is unauthorized. The only thing I can think of is something that is purely web-based, with js the only client side element. I do have access to a dedicated server under my control if there is a secure self hosted solution, but would want it to be a easy solution to install securely. – jgd May 5 '17 at 20:54
  • So, you can install and run arbitrary software on a dedicated server, but not on your local PC? Also, can you access cloud storage like dropbox? – Ben May 5 '17 at 21:50
2

You might be interested in KeeWeb. KeeWeb can be accessed through a browser using either the official KeeWeb web app or you can self-host your own KeeWeb web app.

KeeWeb only ever decrypts data on your PC (the author claims everything is done "offline" and client-side), but uses javascript and other web technology instead of native code so you don't need to install anything on the device you're using it on (you can download a desktop app with a few more features such as auto-type).

KeeWeb uses the same vault format as KeePass so you can be confident the storage is secure. It is fully compatible so you could even use KeePass, KeePass2Android, etc. with the same password database if you choose to do so. Just be aware that the Argon2 implementation is currently much slower in KeeWeb than in KeePass itself so I'd recommend using the AES-based key derivation for now.

  • 1
    Thanks, this is exactly what I'm looking for, especially with the NextCloud app version on GitHub. – jgd May 8 '17 at 19:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.