[Eril-l] [EXTERNAL] Re: Tools for managing shared passwords

Thu Feb 1 09:13:45 PST 2024

We use LastPass. This was already set up when I arrived here. It’s fine for its purpose.

Personally, I use 1Password and have for years. I greatly prefer it, but it’s a bit of a bear to set up, which my husband usually handles. Ideally I’d love to switch to 1Password for work as well, but I’m sure it’s more expensive (is LastPass free?) and not sure I want to deal with the setup/maintenance. At work we’re not storing bank account passwords and such so I’m not overly worried about LastPass’s security breach (you want to check our usage stats? Have at it!). It’s more just a vehicle for sharing admin logins, and it’s mostly just me using it, so it’s really more of a “make sure someone else has access if needed” situation.

But yes, Vickie, they don’t “play” well together when you have two going at the same time. I actually have the autofill for LastPass turned off except for specific websites, because it was driving me crazy.

I’ll check out Keeper!

Karen Schifferdecker, MSIS
Electronic Resources Librarian
Library Collections & Discovery
Western Kentucky University
karen.schifferdecker at wku.edu
[image001.png]

On Feb 1, 2024, at 10:58 AM, Electronic Resources in Libraries discussion list via Eril-l <eril-l at lists.eril-l.org> wrote:

LastPass had a fairly significant security breach<https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/> in 2022.

We now use Keeper<https://keepersecurity.com/> on campus.      I also use 1Password<https://1password.com/> at home to manage personal and family passwords.

Switching to a new enterprise system is always a bit of a learning curve.

If you use more than one password manager, it can be fun to watch them trying to duke it out on your browser screen whenever a login prompt appears!   🙄

Vickie

On Thu, Feb 1, 2024 at 11:34 AM Electronic Resources in Libraries discussion list via Eril-l <eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>> wrote:
Hi Mary Beth

We just started using LastPass, provided by the college. We are a small group, so there are only five people that have access to the shared password folder. This is new to us - we had been using notes fields in Sierra's ERM module, and had planned to continue that sort of process when we migrated to Alma, but security concerns as well as some confusion (mine, mostly) about how to handle multiple resources that share an admin account (like ProQuest's databases). We are a Google Workspace campus, so we also have a shared email account via Google Groups. The shared email can be the "username" for most admin accounts, so no single person is linked to the admin space.

So far, pros:

  *   Several of us can share passwords by use of a shared folder
  *   Updates to passwords only need to be made in one place, one time
  *   Admin accounts are more secure in that they are not viewable by staff in our LMS

Cons:

  *   LastPass is aggressive, when it is active. It wants to try to fill in everything!
  *   We have a dual factor authentication process that can be cumbersome. As an example, I use a separate password manager to handle my login to LastPass
  *   The college is planning to replace LastPass with something else, so there is a new learning curve coming our way

I hope this helps!

Mike

On Thu, Feb 1, 2024 at 11:03 AM Electronic Resources in Libraries discussion list via Eril-l <eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>> wrote:
Hello,

I hope this email finds you well. I am reaching out to the listserv to enquire about your practices regarding password management for shared admin accounts. While we utilize user-specific logins when we can, we are exploring options for improving the way we manage shared passwords.

What are your method(s)? Do you use a password manager to share passwords with authorized colleagues? Does your method work well or are there any drawbacks to it?

Please feel free to respond off-list.

Thanks, and best regards,

~Mary Beth

--
Mary Beth Holm
Electronic Resources Librarian
Virginia Commonwealth University
VCU Libraries
901 Park Ave / PO Box 842033
Richmond, VA 23284-2033
Email: holmm at vcu.edu<mailto:holmm at vcu.edu>
PH: 804-827-0925
Fax: 804-828-5672
_______________________________________________
Eril-l mailing list
Eril-l at lists.eril-l.org<mailto:Eril-l at lists.eril-l.org>
http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org

--
Michael McGuire
Electronic Resources Librarian
Colby College Libraries
5161 Mayflower Hill
Waterville, ME 04901
_______________________________________________
Eril-l mailing list
Eril-l at lists.eril-l.org<mailto:Eril-l at lists.eril-l.org>
http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org

This information is intended solely for the use of the individual to whom it is addressed.
Any review, disclosure, copying, distribution or use of this e-mail communication by
others is strictly prohibited.  If you are  not the intended recipient, please notify us
immediately by returning  this message to the sender and delete all copies.

_______________________________________________
Eril-l mailing list
Eril-l at lists.eril-l.org
http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20240201/7c996d9d/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 8570 bytes
Desc: image001.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20240201/7c996d9d/attachment.png>