Based on our record, KeePass should be more popular than Docker Secrets. It has been mentiond 207 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
Https://keepass.info and share the database file on a shared folder or sync it somehow. - Source: Hacker News / 8 months ago
And the best part is there are solutions already that do this: https://keepass.info/ Does it work on Android or iOS? - Source: Hacker News / over 1 year ago
The key difference here being that this is two way hashing so passwords can be decrypted. In reality, there are a lot of attack vectors like MITM, event logging or sometimes straight up storing data in plaintext. Through these hackers can generally get passwords of all users of these services. So, why don't people use local password managers? Just a txt file encrypted with "master password" should be pretty... - Source: Hacker News / over 1 year ago
When you're at a point where you're relying on a display name to make security-critical decisions, you've already lost. Character substitutions like ķeepass or ƙeepass or keypass are at least possible to spot if you know the name of the product, but not the full URL. But there are many ways to create lookalike domains that don't change the product name: https://keepass.org https://keepass.net https://keepass.info... - Source: Hacker News / over 1 year ago
> People love to hate on passwords but the reality is that for many circumstances (threat models) they are the best compromise. You can make them more than strong enough (take 32+ bytes out of /dev/random and encode however you like, nobody will ever brute force that in this universe) and various passwords managers solve the problem of re-use (never reuse a password). > And it comes with the benefit that you... - Source: Hacker News / over 1 year ago
For more information, refer to the official Docker documentation on secrets. - Source: dev.to / about 1 month ago
Storing sensitive information like passwords, API keys, and other secrets directly in your Dockerfile or Docker Compose file is a security risk. Instead, use Docker secrets for managing this sensitive data. - Source: dev.to / 7 months ago
Yes, swarm is not deprecated. I haven't used it myself yet, but I read elsewhere that swarm offers an easy way to manage secrets with containers. Some people run their 1 container in a swarm cluster with 1 node just for this feature. I see it's even officially suggested as a Note in the doc: > Docker secrets are only available to swarm services, not to standalone containers. To use this feature, *consider adapting... - Source: Hacker News / 8 months ago
The solution is to keep your images clean of any sensitive data. Instead, use environment variables, Docker secrets, or dedicated secrets management tools to handle sensitive information. - Source: dev.to / 9 months ago
Docker has revolutionized the way we build, ship, and run applications. However, when it comes to handling sensitive information like passwords, API keys, and certificates, proper security measures are crucial. Docker secrets provide a secure and convenient way to manage sensitive data within containers. - Source: dev.to / almost 2 years ago
1Password - 1Password can create strong, unique passwords for you, remember them, and restore them, all directly in your web browser.
VAULT - A password manager for freelancers, developers, agencies, IT departments and teams. VAULT safely stores account information and makes it easy to share between co-workers, other team members and clients.
bitwarden - Bitwarden is a free and open source password management solution for individuals, teams, and business organizations.
EnvKey - Protect API keys and credentials. Keep configuration in sync everywhere.
Lastpass - LastPass is an online password manager and form filler that makes web browsing easier and more secure.
Doppler - Doppler is the multi-cloud SecretOps Platform developers and security teams trust to provide secrets management at enterprise scale.