Secret Server (originally from Thycotic, now from Delinea since the 2021 Thycotic merger with Centrify) is an enterprise password management application, which is available with either a cloud-based or on-premise deployment which emphasizes fast deployment, scalability, and simplicity.
N/A
LastPass for Business
Score 8.4 out of 10
N/A
LastPass is a password management application to simplify access to enterprise applications for users but also increase centrality and ease of management of access for administrators with task automation, convenient and secure password sharing, and other features.
Great for managing access to secrets and servers and is more secure than storing passwords in a browser. The browser plugin to autofill passwords works well. Being able to schedule access ahead of time is a big plus for me as I can be forgetful. If you want a lightweight password vault, however, it may not be the best choice.
I consider the tool very effective for generating and managing strong. Very useful tool where secure sharing of credentials is necessary. You can create passowrd on your own (automatically from the tool or self created). Not so user friendly usage of the password management when using the apple app but this is just personal feedback.
Autofill - it auto-fills your account details (and payment cards) with just one click. Incredible timesaver.
Password Generator - it creates unique and secure passwords automagically, one less thing to worry about.
Secure Notes - it has a place to store secure notes, like insurance policies, bank accounts, driver's license numbers/images, wi-fi passwords, database/servers, software licenses, etc.
Payment Cards - great for adding credit cards, personal and business, that you can use to fill in for online/mobile shopping. It's easily one of the best features!
The sharing functionality NEEDS improvement. We share most passwords at a group level, but then it becomes impossible to share them with a dynamic group and one or two one-off people as well. This is a major shortcoming.
I don't love the interface. I feel like there is an attempt at a dashboard, but it is really not effective.
I've heard, but never seen, that the software can actually change passwords in the target systems. If this is part of its deliverable, I do not know how to use it, and I don't know how you would do that. Seems like a great feature for password management.
LastPass has been a game changer for me. I keep more than 100 passwords for financial sites for my company and many of those sites will automatically log you out if you've been idle for 10 or 15 minutes. Typing and re-typing credentials is not only extremely inefficient, but it also adds the risk that you could type them incorrectly and have your account locked. LastPass fills in all my credentials automatically and helps me to generate secure passwords for new sites. I will always want this software on my machine because it makes my life so much easier.
My rating is purely based on the configurational activities, as feature-wise delineation has all the features that are very beneficial for customers, though the implementation is a bit more manual work, which can be reduced with a low-code platform. Along with that, we can have a better UI to have intuitiveness and can manage the platform for shared customers in a better way. Overall, it is a very good tool for PAM.
I login to LastPass when I turn on my computer in the morning and I use it throughout the day. I cannot express how much easier, quicker, smoother (running out of adjectives) this is than our old Excel spreadsheet. I don't bookmark pages anymore, I put them in last pass as all I have to do is search for the site name, press launch and because I have auto signin for most of the sites, I'm in and doing my business in seconds. Truly a blessing!
Haven't had to directly contact support all that much (at least not me personally, I don't know that anyone else on the team has needed to) but the Help Desk options/resources and documentation available are enough to answer any questions, although for what it's worth, the contact support options are not hard to find, and aren't hidden like some sites have it. Additionally, free new user training is offered for those who want it.
Educating users on password management and the basics of the solution is key to then have them successfully start using it themselves. Many have taken it further and now use it for personal passwords as well.
We explored Jum Cloud and ManageEngine. Delinea is comparable in terms of features; however, the implementation of these tools differs. Delinea is a bit more manual than the other two. However, the licensing and overall ROI are better for Delinea, as it provides almost all market-ready solutions and has a robust licensing mechanism, resulting in a better ROI.
Since there is not a master password option for the Google Chrome passwords being saved, I do not feel as though it is as save to use. With LastPass, I can always log out of my browser login, but still continue to work in my browser without having to lot out of my Google account.
Access levels and the organization features in LastPass are so flexible that you can set up your structure to work for virtually any scenario. You can also prevent employees from being able to see the actual credentials, which is huge for security, especially in large companies.
The best return on investment is that all of our passwords are now up to date and usable by everyone in the department. The old way could only be accessed by one person at a time, and it was frequently wrong.
We save a lot of time in IT by having the passwords easily accessible. We also meet our security audit objectives by using this app instead of, say, an Excel spreadsheet or an old application that is no longer supported, as was the case at a previous workplace.
With the size of our department, we don't have enough passwords to go beyond the free version. It's fully functional, but it costs nothing (except some resources on a VM). ROI on free can't be beat.
LastPass has been a great help with productivity and peace of mind in that we can use it to access the computers of people who are away without worrying about password security and we can do the work required without waiting for people to return.
