We have released an updated Passwork Docker image with patched PHP (CVE-2026-109618 and CVE-2026-109619). If you run Passwork 7 or later in Docker, update today.
Every vendor says "AES-256, zero-knowledge." None of that tells you what one compromised key actually opens. We ran the question against Passwork, Bitwarden, Passbolt, 1Password and Keeper.
KeePass's cryptography is genuinely strong. Its key management for teams is not. Here's where a shared KDBX file breaks down — at the save, at the offboarding, at the audit — and what a per-vault key changes.
Passwork organizes credentials in vaults, folders, and records, controls access through roles, groups, and vault types, and protects data with server-side and optional zero-knowledge client-side encryption, so shared credentials stay under company control instead of one employee.
Passwork supports role-based onboarding: each group gets a scenario built around what they need to do on the platform. Explore the User Onboarding and discover the journey end users take from invitation to daily use.
Passwork encrypts every vault with its own key. Bitwarden encrypts an entire organization with one shared key. This comparison breaks down what that means for blast radius, team isolation, account recovery, and audit answers when a credential leaks.
SaaS credential management turns scattered passwords and API keys into one inventory you can share on purpose and revoke on exit. Here's the five-step framework: inventory, structure, migration, access control, and automation.
Passwords now work offline too. Passwork 7.7 brings secure offline access with full admin oversight, org-wide file attachment controls, and five new role-based onboarding guides for a smoother rollout.
Passwork's Vault Types bind admin rights to the vault policy itself, not to whoever created it, closing a gap most enterprises don't even know exists. This guide gives CIOs and CISOs a working model for vault governance, mapped to NIS2 and ISO 27001 requirements.
Vault types Passwork 7.1 introduces a robust vault types architecture, providing enterprise-grade access control for enhanced security and management. Vault types address a key challenge for administrators: controlling data access and delegating vault management across large organizations....
