HashiCorp Vault vs. KeePass

Vault is a reliable and resilient as the Key Management System. It is not for the novice user that does not have a background in information security. It requires a significant time investment into the different key engines that the solution offers to get started. It works very well once implemented and is very flexible in general.

Incentivized

KeePass is a perfect tool for use as a password manager and for storing similar sensitive data. This is especially true if you work from a fixed workstation, supporting your clients. KeePass is incredibly valuable. If you're often on the road and need to log in to KeePass occasionally to look up passwords or data, this can be inconvenient. And quickly and securely sharing data across other media isn't really an option with KeePass. Security is more important in this situation.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• Very secure - no worries about our passwords being stored insecurely or in the wrong place.
• Easy to share access to passwords used company-wide.
• Integrates with Chrome and other browsers for ease of use and speed.
• Price - free to use.

Incentivized

• Documentation for the API moves slower than changes in the API itself
• The database secret engine's API design isn't as elegant as it could be
• No support for revocation of all secrets under one path

Incentivized

• I don't believe that this is so much a negative, but be sure that you keep your password database saved in a location that is accessible (even during an outage). Failure to do so will make it hard/impossible to recover passwords in the event that your database is unreachable (such as if a network drive failure).

Incentivized

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

My very good experience in the past 15 years of usage of KeePass makes it easy to decide for a renewal of this friendship. I was never disappointed and KeePass always meets my expectations. The software runs stable and if there should be a software error, it will be fixed in no time. This is customer satisfaction.

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

KeePass is easy to use and requires no prior training using it. I would rate KeePass a score 9 out of 10. It stands out in managing credentials securely and efficiently. No other similar app performs its core function as well, making KeePass an essential tool for password management and security.

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

I have almost never had to contact support. This product has a wide community, a very expansive documentation/forum site where generally any question/issue already has an answer/fix or explanation/workaround, or plans for improvement in a future version. On the occasions that I have reached out, answers were fairly quick, useful, and respectful.

HashiCorp Vault integrates with a lot of tools and systems, and the documentation was pretty robust with a lot of community help. Because HashiCorp Vault is also older than other solutions, it is already well developed with a lot of features you need for storing secrets and configuration. HashiCorp Vault is also friendlier towards application build and is focused in providing security and a lot of customization for almost any use case scenario. Bitwarden is more limited to password management of enterprise accounts, but for application usage is not that great or easy to integrate. It does not scale well also. AWS Secrets Manager on the other hand is really good but more limited to AWS applications and vendor lock is problematic as well for such a critical piece of infrastructure.

KeePass is the most simple of the password managers, but it also means it doesn't scale as well and doesn't have all the features some of the other options have. IT Glue is a much better choice for company-wide management of passwords but it has high costs and is much more than just a password manager. LastPass is probably closer to what KeePass can do, but offers the ability to access passwords from all devices such as computers and phones. KeePass is better for being free and is best for use on a single computer.

Incentivized

• Allowed better access control for credentials, passwords, and important keys.
• After we started using HashiCorp Vault, we were able to base our environment 100% as code.
• SSH access control that is possible using HashiCorp Vault adds an extra level of security in environments where external remote access is required.

Incentivized

• KeePass is free so you can share it whit all
• Is quick to use, you don't have to activate VPN or access the web to obtain a password or a quick guide
• Is not super easy to use, you need to be a little patient to have all configured fine

Incentivized