Redmine Passwords

Team passwords where your projects are

AlphaNodes online training, about 5 minutes

What the plugin does

Redmine Passwords keeps the access data of a project in the project itself, instead of in mail threads, wiki pages and spreadsheets.

One entry per access: username, password, website, category, status
Who sees it follows the project membership and the roles, like everything else in Redmine
Password and description are stored encrypted in the database

Who is it for? Three examples

Three examples: an agency with one project per customer, an IT and operations team with servers, devices and business software, and a development team with test, staging and production environments

From scattered to one place

Passwords in mail, wiki and spreadsheet become one encrypted entry in Redmine that the project team sees by role, private entries only the author and assignees, an admin without membership not at all

Categories and rules

Category form in the administration: name, default, icon and colour, minimum password length, upper and lower case, numbers, symbols, maximum age in days

Administration, Passwords, tab Categories: each category sets minimum length, character rules and a maximum age in days. The generator follows them, and entries show the days remaining when their category has a maximum age.

Anatomy of a password entry

A password entry with name, category, status, masked password with show and copy, strength, days remaining, website, assignee, tags, files and relations

What it looks like

Detail page of a password in the online demo: username with copy button, masked password with copy and show buttons, category, status, assignee, password strength and days remaining

Who sees what

Table of who sees a normal and a private password entry: a member with the permission sees normal entries, author and assignee see the private entry too, a member without the permission and an administrator who is not a project member see nothing

The rules in words

Who sees what

Project members with the permission see all entries of the project, by role: view, add, edit, delete
An entry marked private is seen only by its author and the assigned user or group, who need View passwords too
An administrator who is not a member of the project sees nothing

Export to CSV or XLSX can contain passwords in clear text. That is why export has its own permission.

Encryption

A key in configuration.yml, new entries encrypted automatically and existing ones once by script, password and description encrypted in the database, how to change the key and why the backup needs the key

Finding and keeping order

Filters by category, status, tags, assignee, strength and age, saved as queries per project or for all projects
Security audits in the sidebar list weak passwords and passwords older than 6 months, 1 year or longer
Status valid, to verify or invalid marks what needs attention, the history records every change but never the secret itself

Getting started

Four steps: set the cipher key, create categories with rules, give the roles their permissions, activate the module in the project and import the old list as CSV

What is the cipher key?

The cipher key, explained

Flow: look in config/configuration.yml whether database_cipher_key is set. If yes, keep it, Redmine already encrypts LDAP, repository and two-factor secrets with it. If no, generate one with rake redmine:passwords:generate_cipher_key, paste it in, restart Redmine before the first password is saved. From then on password and description are encrypted on save, existing entries once with rake redmine:passwords:encrypt. Keep a copy with the database backup, never in version control, never replace it

In short

One place, encrypted, visible by role. Retire the mail thread.

Works together with

Issues: link a password to the issue it belongs to, across projects if the setting allows it
DB plugin: attach the password to the server, device or licence it opens
ServiceDesk plugin: link customer logins to the contact
Automation plugin: rules when a password is saved, or on a schedule

Not included: a browser extension that fills in forms, and a log of who viewed a password. Redmine Passwords is part of the Enterprise+ bundle, also available on its own.

See the issue link in 24 seconds

Linking a password to an issue, in 24 seconds

New issue, Add passwords, search the entry, tick it, create the issue. The password then appears under Password relations on the issue.

See it live

Try the plugin in our online demo

alphanodes.com/redmine-demo

Product page · Back to online training