This question already has an answer here:
- How to manage team passwords? 3 answers
Imagine we are working in a team of around 5 people. We all install new servers on a monthly base and need to find a better way of storing and sharing the server credentials (offline-location/webadress, root login, db login, ...) somewhere where the whole team can access them, read/write. This location does not have to be accessible through the internet, but is a can if someone can provide a safe way of doing that.
At the moment:
- currently the one who setup the server has the credentials: remembers them (usually connected to very unsafe standard passwords) or writes them in an email, exchanges them via skype, puts them in a local word document, writes them on a sheet of paper
- ssh-keys are already in use, but it just happened that the service was not available and we needed the root login, but it was hard to find and that should not happen again
What is a safe and best practice of storing and sharing credentials in a team?
Paper only? Samba share with documents? As emails only? Some kind of database? Third party software?