Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Often I end up doing server administration for clients as part of developing web applications, I always set up access for myself using an SSH Key pair. I usually end up choosing a random password for the root account and emailing that to my clients. The client sometimes doesn't even need to have access, I just want to make sure and not be the only one holding the keys in case I'm not available, or they switch to another developer.

For non-technical clients, what is the best way to manage, store, and communicate important passwords and credentials?

Personally, I use Lastpass, but requesting a client to signup to share one password which can't be used via the browser seems a little off.

share|improve this question

4 Answers 4

If I am the sole admin in an organization and nobody else has the technical skill or inclination to manage the systems my personal preference is to demonstrate that the passwords work, then give them to the client on paper, in a break-open box (I use KeySure boxes http://www.keysure.net/keycontroller.html).

If I am hit by a bus, quit, or get let go all they need to do is break open the box and they have all the passwords I've set/changed.
If I'm still around and I notice that the key box has been broken open I know someone has the passwords who shouldn't (or someone who should have them is touching stuff without telling me) -- This offers some protection from well-meaning folks trying to "fix" a problem and destroying a stable environment.


In larger companies like the one I'm at now the back of our Site Operations book contains a page of (PGP-Encrypted) passwords for stuff that does not use key-based authentication. The passwords are accessible to the C-level officers of the company, as well as the senior admins & developers, either by cutting and pasting from a PDF of the Site Ops book or in the absolute worst case by carefully re-typing the encrypted block.

share|improve this answer
2  
Link for Keysure.net does not seem to work... I think this is what voretaq7 is referring to: selectlocks.com/site/1266378/product/29-00103 –  BillN Jun 23 '10 at 16:38
    
Hmm - works for me... I'll edit & long-link it (but yes -- same product :-) –  voretaq7 Jun 23 '10 at 16:49

You could use something like a password-protected .ZIP file through http://drop.io with a one-time download and expiry date. You could call and give them the password for the zip and dropbox over the phone and email them the link.

I've also text messaged or phoned half of the password, email the other half, or some combination of both.

share|improve this answer

Since it looks like you've rephrased your question, if you're on-site, I would grab a copy of KeyPass and install it on a USB key or on their server. It uses Blowfish encryption, doesn't require installation, and can store all of their passwords in one secure place.

share|improve this answer
    
Rephrased my question? It hasn't been edited. Unfortunately, I'm not on site, I'm not near my clients. –  Daniel Beardsley Jun 23 '10 at 20:04
    
Either that or I wasn't paying attention the first time around. –  WuckaChucka Jun 23 '10 at 22:44

Skype IM uses encryption so if your client uses that, that might work for you.

share|improve this answer
    
Funny. You recommend a closed source software with no detail about the used encryption algorithm. And where NSA, DoD and others have hooks into the system to intercept all communication. –  mailq Jan 27 '12 at 23:58

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.