Ask HN: How does your company manage its encryption keys?
<a href="https://www.vaultproject.io/" rel="nofollow">https://www.vaultproject.io/</a><p>We use Hashicorp's Vault product to manage SSH credentials, TLS certificates, as well as application secrets across thousands of users, tens of thousands of virtual machines, and hundreds of applications.<p>We pay for the enterprise version, but the free version is more than capable for most needs. Avoid a password manager if you can, it leads to poor security practices and availability issues depending on how and where the data is stored (IMHO, YMMV). Use single sign on where ever possible.<p>Disclaimer: No affiliation other than a satisfied customer and frequent end user of the product.