Internal Password Management System
Internal password management replacing insecure plain-text password lists.
Internal company solution – presentation abstracted for confidentiality reasons.
- Problem
- Credentials were kept in plain-text lists and spreadsheets.
- Solution
- Internal password management with secure storage, permissions and 2FA – simple enough for everyday use.
- Result
- Credentials central, protected and traceable instead of scattered in plain text.
Initial situation
Credentials for systems and services were maintained in lists and documents that were neither encrypted nor permission-controlled.
Problem
Plain-text password lists cannot be controlled: who has access, who changed what, which version applies? Every hand-over increases the risk.
Goal
An internal tool that stores credentials securely, controls access via permissions and 2FA and stays simple enough to actually be used.
Solution
A dedicated application was developed for the internal management of credentials.
- Secure storage of credentials
- Permissions on entries and areas
- Two-factor authentication
- Simple handling in everyday work
- Internal documentation
Result
Plain-text lists were replaced; credentials are central, protected and accessible only to authorised people.
Business value
Lower risk through controlled access to credentials, less effort during hand-overs and stand-ins.
My contribution
Design, development and operation of the application.
Technical details
Architecture
Internal web application with encrypted storage of entries, a permission model for areas and entries, and 2FA at sign-in.
- User (2FA)
- Password management application
- Permission check
- Encrypted storage
Technologies
Integrations, APIs and authentication
Stand-alone internal application; sign-in with a second factor.
Security
Encrypted storage, permissions per entry and area, 2FA. The system is not externally audited or certified; it replaces plain-text lists with a controlled internal process.
Technical highlights
- Encrypted storage instead of plain text
- Permissions per area and entry
- 2FA at sign-in