Password Safe user essentials

Password Safe stores, manages, and rotates the passwords and secrets for your organization's most sensitive accounts, giving you controlled, on-demand access without ever having to see or manage credentials yourself.

What is Password Safe?

Password Safe is BeyondTrust's privileged access management solution. It stores, manages, and rotates passwords and secrets for your organization's most sensitive accounts, so you get controlled, on-demand access to the credentials you need without ever seeing or manually managing them.

Capabilities and benefits

• Discovers and protects privileged accounts, applications, SSH keys, and cloud/DevOps secrets automatically.
• Generates and rotates strong, random passwords, reducing the risk of weak or reused credentials.
• Grants access just-in-time (JIT) and only for as long as you need it.
• Monitors privileged sessions in real time and can pause or end suspicious activity.
• Keeps a complete, searchable audit trail of every request and session.
• Restricts access to critical systems, including assets and applications, keeping them safe from potential inside threat risks.

What you can do

• Request privileged account passwords and check them out once your request is approved.
• Approve or deny access requests, if you're designated as an approver.
• Launch remote sessions to managed systems without ever seeing the underlying password.
• Store, search, and retrieve secrets such as API keys and certificates in Secrets Safe.
• Manage everyday business application passwords through Workforce Passwords.

Key terms to know

• Functional Account: An account that can access a system with the privileges required to manage and change shared account passwords.
• Managed System: A computer, server, database, or device whose accounts Password Safe protects.
• Managed Account: A privileged account on a managed system whose password Password Safe stores and rotates.
• Smart Rule: A query that organizes assets into Smart Groups and manages Password Safe accounts.
• Smart Group: A collection of managed assets, systems, or accounts that a Smart Rule defines.
• Access Policy: The rules that define when and how often you can request a password, session, or application.
• Role-Based Access: Your assigned role, such as Requestor or Approver, that determines what you can see and do.

Access it on the go

Password Safe works as a web portal from any browser and as a free mobile app for iOS and Android, so you stay productive wherever you are. Use the app to request and check out credentials, approve requests in real time, view your favorite accounts, and browse Secrets Safe.

Quick reference

Need Access?
Submit a request in Password Safe; approved credentials appear in your queue right away.

Store Secrets
Use Secrets Safe to keep API keys, certificates, and other credentials organized and secure.

Get the Mobile App
Search "Password Safe" in the Apple App Store or Google Play.

Resources

Password Safe-Getting Started

Secrets Safe: Overview

Password Safe for Mobile app