Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have over ten web servers to manage and configure, with each server having its own root user and password. I have to maintain a database of all the root passwords on my development machine, but I would ideally like to have something a lot more secure and less cumbersome.

I have considered using a different SSH key as a root login, but there may be a time when I will login to a server using a non-root user and then issue a su command to hop in when I need to install or launch something. Either way I would have to make the decision to login as a user before I connect to the host or during the connection session.

Any recommendations?

share|improve this question
Unify the passwords to a single/couple secure ones? – Ƭᴇcʜιᴇ007 Sep 7 '11 at 4:25
Have you looked at some form of password safe app? e.g. It's still a database, but at least it's self contained and secure. – Rhys Gibson Sep 7 '11 at 5:38

Separate SSH keys would work. (You can use ssh root@0 instead of su.)

sudo is another option – it asks for your own password before giving root privileges.

share|improve this answer

I found this. You may want something like it. Here is the description:About the size of a smart phone, this is the device that secures account information for website addresses, usernames, passwords, and ATM PINs, and stores them for immediate retrieval. Unlike password information stored on a computer, your passwords are stored offline in the vault's memory, ensuring sensitive information can never be compromised. The vault's keyboard slides out--accounts and additional text notes can be typed after entering an initial password. It can store up to 400 account records, mitigating the risky practice of leaving passwords on notes under keyboards or using one password for all accounts. Buttons scroll between accounts for display on the LCD. In case the device is misplaced, lost, or stolen, five unsuccessful attempts to access your accounts will lock the device for 30 minutes--your passwords are safely protected. The entire device can be reset--permanently erasing all data--by pressing the reset button. Built-in flash memory retains passwords in memory when the CR2032 battery requires changing.

share|improve this answer
Did I understand your question properly? – wizlog Sep 7 '11 at 3:46

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .