Self-hosted
password manager
trusted by 10 000
businesses

Passwork offers seamless integration with enterprise authentication systems, including Active Directory, Azure AD, LDAP, and SAML SSO. This ensures automated synchronization of user accounts, groups, and permissions, aligning with your organization’s existing structure and security policies.

Key integration features:

• • LDAP group mapping: Automatically provisions users based on directory groups.
• • Single Sign-On (SSO): Supports SAML authentication for unified access.
• • Role-based access control: Permissions are inherited from Active Directory groups.
• • Automated user lifecycle management: Reflects changes in directory services without manual intervention.

This eliminates duplicate user management efforts while maintaining existing authentication workflows and security protocols.

Passwork offers flexible deployment options designed for enterprise environments. Whether you prefer rapid installation or customized setups, Passwork adapts to your infrastructure needs.

Deployment methods:

• • Standard installation: Quick setup via PowerShell (Windows) or Docker (Linux).
• • Manual installation: Suitable for complex configurations in large enterprises.
• • Clustered deployment: Supports high availability through multiple application servers and MongoDB replica sets.

Technical requirements:

• • Minimal infrastructure demands, scalable by user count and data volume.
• • SSD storage recommended for enhanced database performance.
• • Horizontal scaling: Easily add servers as your organization grows.
• • Failover support: Ensures automatic switching between primary and secondary nodes for reliability.

Passwork’s architecture is designed to minimize resource usage while providing robust scalability and reliability.

Passwork provides IT administrators with advanced tools for centralized management. These features ensure precise control over user access, permissions, and security policies.

Administrative capabilities:

• • Role-based access management: Create custom permission sets tailored to your organization’s needs.
• • Vault and folder-level permissions: Define granular access controls for users and groups.
• • Administrative rights delineation: Separate responsibilities among different admin roles.
• • LDAP group mapping: Automatically map LDAP groups to Passwork groups, streamlining user provisioning and permission assignment.
• • Automated policy enforcement: Includes password complexity requirements and other security standards.
• • Bulk user management: Use CSV import/export for efficient onboarding and updates.
• • Comprehensive activity logging: Track all user actions and system events for auditing purposes.

These tools empower IT teams to maintain security compliance, enforce policies, and monitor user behavior effectively.

Passwork ensures top-tier security through advanced encryption and compliance measures. Its self-hosted architecture guarantees complete data sovereignty.

Security architecture:

• • AES-256 and RSA encryption: Protects data at rest and in transit.
• • Zero-knowledge client-side encryption: Even system administrators cannot access decrypted password data.
• • Multi-factor authentication: Strengthens security by requiring an additional verification step during login.
• • GDPR compliance: Implements robust data protection and privacy controls.
• • Password security analysis: Identifies weak, outdated, or compromised credentials.

Validation and compliance:

• • HackerOne penetration testing: Independent security assessments by ethical hackers.
• • ISO 27001 certification: International standard for information security management.
• • Secure development practices: Follows a security-by-design approach throughout the development lifecycle.

These measures ensure compliance with global standards and protect sensitive credentials against unauthorized access.

Passwork’s MongoDB-based architecture provides enterprise-grade backup and disaster recovery capabilities to safeguard your data.

Backup features:

• • Automated scheduling: Aligns with your recovery point objectives.
• • Replica set configuration: Enables real-time data synchronization across multiple servers.
• • Geographic distribution: Supports multi-datacenter deployments for added resilience.

Example: A deployment with 1,000 users and 5,000 passwords generates a 10GB database, but backup archives require only 0.5GB, making it practical to maintain multiple copies.

Passwork’s architecture is designed to scale horizontally, ensuring consistent performance as your user base grows.

Scalability features:

• • Horizontal scaling: Add multiple application servers to distribute application load.
• • MongoDB replica sets: Provide automatic failover for high availability.
• • Load balancer integration: Compatible with any load balancer placed in front of application servers.
• • Performance optimization: Fine-tuning of any system component is available to achieve optimal response times.

Passwork handles increased load seamlessly, ensuring reliable performance for enterprises of any size.