Onboarding
Passwork is a corporate password manager with Zero-Knowledge encryption. It lets teams store, share, and manage credentials securely across vaults and folders, with role-based access control and integrations into existing identity infrastructure (LDAP, SSO).
We've prepared a series of step-by-step onboarding guides for each user role. Each scenario covers exactly what needs to be configured on day one, and doesn't require prior familiarity with the product.
Choose your onboarding scenario
Members
You received an invite to Passwork and need to set up your account, install the browser extension or mobile app, enable two-factor authentication, and start working with vaults.
Department managers
You are responsible for organizing credential storage for your team. You need to set up vault structure, invite colleagues, configure access levels, and get acquainted with staff management.
IT administrators and system owners
You are deploying Passwork for the entire organization. This scenario describes how to integrate Passwork with your infrastructure (LDAP, SSO), arrange vault and role structure, roll out users at scale, and monitor the system after launch.
DevOps engineers and integrators
You need to automate secret injection into CI/CD pipelines, configure service accounts, use the CLI or Python SDK to interact with Passwork programmatically, and automate credential rotation. In case you also deploy Passwork itself, infrastructure operations guide is provided on this page.
→ DevOps and integrators onboarding
Security specialists and compliance officers
You need to verify that the Passwork deployment is bulletproof: server configuration, TLS, security headers, authentication policies, roles following the principle of least privilege, encryption status, and monitoring. This scenario provides structured checklists aligned with ISO 27001, GDPR, and NIST.
Security checklist
Regardless of role, the following security practices apply to all Passwork users
- Enable two-factor authentication (2FA) on your account immediately after activation. Your administrator may enforce this as a policy.
- Choose a strong master password if your organization uses client-side encryption. This password encrypts your private key and cannot be recovered by the system administrator. Store it securely offline.
- Never share your master password with anyone, including IT staff.
- Lock your session when leaving your workstation. Use the auto sign-out settings in your account profile.
- Report suspicious activity — unauthorized password changes or unfamiliar logins — to your administrator immediately.
Email templates for rollout
We've prepared a number of email templates for administrators to communicate with employees during deployment and guide them through the onboarding steps.