TL;DR: we now offer a password manager service that also allows sharing passwords within groups.

Full story:
For a long time, we've been trying to promote IT security in general and secure password handling in particular. In both our introductory course and our documentation we recommend using a password manager to securely handle the plethora of passwords that modern-day life usually entails (hopefully a different one for each service!). What we did not have however was an easy-to-use solution to sync your password vault across your different devices. Yes, there's KeePassXC that can work with Polybox to ensure coherent password databases on all devices, but that's not exactly straightforward to set up.
In order to make setting up and handling the password manager easier for you, we're now announcing a new service: an Open Source password vault hosted at ISG D-PHYS:
Vaultwarden is an alternative implementation of the the Bitwarden backend and we've been evaluating it for a while. It now seems ready for prime time so after testing within ISG, we're releasing it to the Department. Aside from easier daily usage, it offers another feature that many (research) groups might find interesting: passwords and confidential information in general can be shared with others, e.g. the group's credit card with all PhD students.
If you'd like to give it a try, please read our service description to get started.

Since the monthly password reminders of our mailing lists software Mailman have caused more confusion and unnecessary work than they seemed to help, from now on they are globally disabled on our mailing list server.

If you lost or forgot your password for the subscription of any of our mailing lists, you can always go to https://lists.phys.ethz.ch/listinfo, choose the appropriate list, scroll down to the bottom of that page, enter your e-mail address, click on "Unsubscribe or edit options", and then click on "Remind". Your password will be sent to your e-mail address.
(more…)