Vault Keys
- Tomhauser Bence
Vault Key
After completing the steps outlined in the previous section and successfully registering, you will soon receive an automatic email from us. This email will include useful tips along with a Vault Key (username: vault).
This credential is required when the Vault (in Full Control Mode) locks itself. Think of it as PassMan being a safe within a safe—a vault inside a larger vault. This acts as an additional security layer, ensuring that only authorized IT administrators should ideally have the rights to unlock the safe.
Since this credential is sent to the email address provided during registration, the person setting up PassMan must take responsibility for keeping this key secure.
When you open PassMan UI (Full Control Mode) at first time, you won’t encounter this, because we automatically unlock it for you. However, over time (or after certain admin actions), it will lock itself, so admin(s) need to reopen it with a valid Vault Key.
Open the Vault
PassMan close the vault at certain intervals for security reason.
To unlock it, click the Open Vault button and use the password associated with the vault username.
If the Vault key has not been changed (or a new key has not been set), you can find the password in the very first automatic email we sent you.
Unlocking the vault requires either a unique Open Vault permission setting or the Vault Admin role.
Manage Vault Keys
When the PassMan vault is open, you can add a new Vault Key to the system or delete an existing one. Multiple keys can be actively used.
The Manage Vault Keys option can be found in the dropdown menu in the top right corner next to the username.
Adding or deleting a Vault Key requires either the Add Vault Key or Delete Vault Key permission settings, or the Vault Admin role.
