---
path: onboarding/intro.mdx
title: Onboarding
sidebar_label: Onboarding
hide_title: false
sidebar_position: 3
slug: /
pagination_next: null
pagination_prev: null
description: >-
  Passwork onboarding guides for all user roles: end users (Members), department managers,
  and IT administrators. Choose your path to get up and running quickly.
keywords:
  - Passwork
  - onboarding
  - getting started
  - setup
  - member
  - manager
  - administrator
  - rollout
  - deployment
---

Passwork is a corporate password manager with Zero-Knowledge encryption. It lets teams store, share, and manage credentials securely across vaults and folders, with role-based access control and integrations into existing identity infrastructure (LDAP, SSO).

We've prepared a series of step-by-step onboarding guides for each user role. Each scenario covers exactly what needs to be configured on day one, and doesn't require prior familiarity with the product.

## Choose your onboarding scenario 

### Members

You received an invite to Passwork and need to set up your account, install the browser extension or mobile app, enable two-factor authentication, and start working with vaults.

**→ [Member onboarding](./member-onboarding/intro.mdx)**

---

### Department managers

You are responsible for organizing credential storage for your team. You need to set up vault structure, invite colleagues, configure access levels, and get acquainted with staff management.

**→ [Manager onboarding](./manager-onboarding/intro.mdx)**

---

### IT administrators and system owners

You are deploying Passwork for the entire organization. This scenario describes how to integrate Passwork with your infrastructure (LDAP, SSO), arrange vault and role structure, roll out users at scale, and monitor the system after launch.

**→ [Admin rollout Playbook](./admin-onboarding/intro.mdx)**

---

### DevOps engineers and integrators

You need to automate secret injection into CI/CD pipelines, configure service accounts, use the CLI or Python SDK to interact with Passwork programmatically, and automate credential rotation. In case you also deploy Passwork itself, infrastructure operations guide is provided on this page.

**→ [DevOps and integrators onboarding](./devops-onboarding/intro.mdx)**

---

### Security specialists and compliance officers

You need to verify that the Passwork deployment is bulletproof: server configuration, TLS, security headers, authentication policies, roles following the principle of least privilege, encryption status, and monitoring. This scenario provides structured checklists aligned with ISO 27001, GDPR, and NIST.

**→ [Security review](./security-review/intro.mdx)**

---

## Security checklist

:::warning 
Regardless of role, the following security practices apply to all Passwork users
:::

- **Enable two-factor authentication (2FA)** on your account immediately after activation. Your administrator may enforce this as a policy.
- **Choose a strong master password** if your organization uses client-side encryption. This password encrypts your private key and cannot be recovered by the system administrator. Store it securely offline.
- **Never share your master password** with anyone, including IT staff.
- **Lock your session** when leaving your workstation. Use the auto sign-out settings in your account profile.
- **Report suspicious activity** — unauthorized password changes or unfamiliar logins — to your administrator immediately.


## Email templates for rollout

We've prepared a number of email templates for administrators to communicate with employees during deployment and guide them through the onboarding steps.

**→ [Email templates](./admin-onboarding/email-templates.mdx)**