Access management

Latest — Oct 13, 2026
Pegnitz, a Bavarian town near Nuremberg, ran municipal IT on a file-based vault that couldn't handle concurrent access,...

Stadt Pegnitz: Solving file-sync conflicts with Passwork

Pegnitz, a Bavarian town near Nuremberg, ran municipal IT on a file-based vault that couldn't handle concurrent access, forcing administrators to coordinate every edit verbally. The team moved to Passwork's self-hosted platform for real-time, multi-user credential access.

Stadt Pegnitz: Solving file-sync conflicts  with Passwork
Oct 13, 2026 — 6 min read
Auerbach in der Oberpfalz, a Bavarian town of 9,470 residents, ran municipal IT on two file-based password managers...

Stadt Auerbach: Zero-knowledge security with Passwork

Auerbach in der Oberpfalz, a Bavarian town of 9,470 residents, ran municipal IT on two file-based password managers prone to sync failures and with no role-based access control. The team moved to Passwork's zero-knowledge platform to close that security gap.

Stadt Auerbach: Zero-knowledge security with Passwork
Oct 13, 2026 — 24 min read
Every vendor says "AES-256, zero-knowledge." None of that tells you what one compromised key actually opens. We ran the...

How password managers draw the encryption boundary

Every vendor says "AES-256, zero-knowledge." None of that tells you what one compromised key actually opens. We ran the question against Passwork, Bitwarden, Passbolt, 1Password and Keeper.

How password managers draw the encryption boundary
Oct 12, 2026 — 23 min read
A vault in Frankfurt can still answer to a foreign court order, and an "EU hosted" label says nothing about where the...

GDPR-compliant password management: Where your data lives

A vault in Frankfurt can still answer to a foreign court order, and an "EU hosted" label says nothing about where the backups are. Use the six-zone map to find every place your credentials live, the GDPR duty each one triggers, and the evidence to hold before an audit.

GDPR-compliant password management: Where your data lives
Oct 9, 2026 — 14 min read
A graduating student, an adjunct whose term ended, and a resigning employee are three different events, yet most...

Academic identity lifecycle management for students and staff

A graduating student, an adjunct whose term ended, and a resigning employee are three different events, yet most identity tools treat them as one "leaver" case. Build separate access lifecycles, join them in one identity record, and remove only the access that is no longer justified.

Academic identity lifecycle management for students and staff
Sep 28, 2026 — 16 min read
Password chaos spreads past the IT helpdesk into the rest of the educational institution, draining staff time, widening...

Password chaos in educational institutions: Why it matters

Password chaos spreads past the IT helpdesk into the rest of the educational institution, draining staff time, widening the attack surface, and risking compliance failures. See the three biggest risks and how to close them.

Password chaos in educational institutions: Why it matters
Sep 24, 2026 — 11 min read
Access management belongs at the top of your SMB cybersecurity checklist. Learn how to set up identity, authentication,...

Access management for SMBs: The first cybersecurity layer

Access management belongs at the top of your SMB cybersecurity checklist. Learn how to set up identity, authentication, authorization, and revocation as a system that holds up day to day.

Access management for SMBs: The first cybersecurity layer
Sep 18, 2026 — 17 min read
Your vendor's security page makes a lot of promises. Here's the six-pillar framework for checking which ones are...

Password manager security features: How to evaluate them

Your vendor's security page makes a lot of promises. Here's the six-pillar framework for checking which ones are actually true, before you sign or renew.

Password manager security features: How to evaluate them
Sep 17, 2026 — 13 min read
One person who can create a vendor and approve its payment doesn't need anyone's help to move money that should have...

What is segregation of duties (SoD)? Definition and examples

One person who can create a vendor and approve its payment doesn't need anyone's help to move money that should have needed a second signature. Here's what segregation of duties actually means, real conflict examples, and how to enforce it without a dedicated GRC team.

What is segregation of duties (SoD)? Definition and examples
Sep 1, 2026 — 7 min read
Passwork supports role-based onboarding: each group gets a scenario built around what they need to do on the platform....

A guide to Passwork User Onboarding from invitation to daily practice

Passwork supports role-based onboarding: each group gets a scenario built around what they need to do on the platform. Explore the User Onboarding and discover the journey end users take from invitation to daily use.

A guide to Passwork User Onboarding from invitation to daily practice