We have various passwords that need to be known to more than one person in our company. For example, the admin password to our internet routers, the password for our web-host, and also a few "non-IT" passwords like safe codes.
Currently, we use an ad hoc system of "standard passwords" for low-value systems, and verbal sharing of passwords for more important/potentially damaging systems. I think most people would agree that this is not a good system.
What we would like is a software solution for storing "shared" passwords, with access for each limited to the people who actually need it. Ideally, this would prompt, or enforce, periodic password changes. It should also be able to indicate who has access to a particular password (e.g., who knows the root password for server XYZ?)
Can you suggest any software solutions for storing and sharing passwords? Is there anything particular to be wary of?
What is the common practise in small-medium sized companies for this?