HashiCorp Vault vs. Keeper

Vault is a reliable and resilient as the Key Management System. It is not for the novice user that does not have a background in information security. It requires a significant time investment into the different key engines that the solution offers to get started. It works very well once implemented and is very flexible in general.

Incentivized

It is great for the management of passwords across organizational departments or specific cross-functional teams. The sharing feature is well suited to this. It may get harder to administer effectively (i.e., feel like you are in control) when there are many, many groups. Also, if there are groups or departments with high staff turnover, the administration efforts may get more difficult, and the chances that someone may have access to something they shouldn't increases.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• Easy to use - you can easily access it anywhere and anytime you want (it has mobile apps, web and desktop versions)
• High level of security - 2-step authentication with your phone number
• Simple to save and get passwords and login information. Keeper fills it in for you. It may create complex passwords for you
• Syncs across all devices

Incentivized

• Documentation for the API moves slower than changes in the API itself
• The database secret engine's API design isn't as elegant as it could be
• No support for revocation of all secrets under one path

Incentivized

• It took me a while to discover I could change the settings in the Keeper app so it stays open for some minutes while I am working on my phone or tablet. Once I found the settings, it became far more efficient to use.

Incentivized

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

It's just easy to use, plain and simple. It has the complexity and user-interface that gives you confidence in its build but the ease-of-use that keep things from getting too complicated. A huge plus when you have to onboard new members of the team or summer interns when you need them to step in and make orders on your behalf.

Incentivized

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

Because it is so good. It always works, has not crashed even in 3 years; I have a lot of data in it (never any problems).

HashiCorp Vault integrates with a lot of tools and systems, and the documentation was pretty robust with a lot of community help. Because HashiCorp Vault is also older than other solutions, it is already well developed with a lot of features you need for storing secrets and configuration. HashiCorp Vault is also friendlier towards application build and is focused in providing security and a lot of customization for almost any use case scenario. Bitwarden is more limited to password management of enterprise accounts, but for application usage is not that great or easy to integrate. It does not scale well also. AWS Secrets Manager on the other hand is really good but more limited to AWS applications and vendor lock is problematic as well for such a critical piece of infrastructure.

I do not recall the other products I tested. I believe Keeper provided a free trial that allowed me to verify that it met my needs before I was required to purchase. I also found their support team to be responsive when I experienced some problems. The cliche, "If it ain't broke don't fix it" fits well in this case. I am able to create and use online profiles safe in the knowledge that my passwords cannot be easily hacked and my data is safe.

• Allowed better access control for credentials, passwords, and important keys.
• After we started using HashiCorp Vault, we were able to base our environment 100% as code.
• SSH access control that is possible using HashiCorp Vault adds an extra level of security in environments where external remote access is required.

Incentivized

• Keeper is a great product to have, positively impacting end-users to be safer with their password while providing ease of management.
• It will cost you $29,99 per year for unlimited devices, password storage, cloud backups, sharing and 24/7 support, which we found is quite a good bargain!
• The Zero Knowledge feature is quite great for every enterprise since the fact that only you have your master password means that nothing can force the company to turn over your passwords, and a distraught employee can't weasel into your stored data.

Incentivized