Roswell is a simple rails app that allows you to share passwords, notes, and software licenses with select groups of people.
- Four types of: generic accounts, web accounts, licenses, and notes
- Unified search
- Simple user and group management
- Organize items by one or more groups
- Restrict users to only certain groups
- A favorites list for frequently used entries
- Single click copy-to-clipboard
Not extremely secure, but more secure than a shared google spreadsheet. Passwords are encrypted server-side before they are stored in mongo. The key to decrypt is stored on the server, so if your server is compromised, the passwords could be compromised. The production environment requires SSL, this is to ensure that cleartext passwords aren't sent/received over the wire.
Client-side encryption seems to be a popular solution, but can be complex to implement and a little cumbersome to use. The hope was to figure out the UI and the workflow for creating/sharing/grouping/retrieving passwords, and then figure out how to make it more secure. Really, we just needed something better than a spreadsheet.
Roswell is just a rails app so clone it down somewhere and:
> bundle # install gem dependencies
> rake roswell:setup # create your encryption key file and an admin user
Then just start your choice of server (you'll wanna put it behind SSL).
- Ruby 1.9
- MongoDB
- Fork it
- Create your feature branch (
git checkout -b my-new-feature) - Commit your changes (
git commit -am 'Added some feature') - Push to the branch (
git push origin my-new-feature) - Create new Pull Request