Password Manager

Introduction

Akeyless can also be used to store, manage, generate, and share passwords simply and securely.
The user can choose to save a password in their personal folder for their own use or to save them in the account's shared spaces they have access to, for the whole team to use. The user may also choose to install the Akeyless browser extension to inject the stored passwords straight into the website they apply to and to save passwords on the go.

🚧

Warning

Any passwords saved from within web forms using the extension will automatically be saved to your personal folder that only you can access, and will not be available to your other teammates.

All passwords you create in the console will also be available from the extension and vice versa. The extension lets you save passwords as you go and inject them into websites, and the console lets you view, sort, and manage them more clearly.

Personal Folder

The personal folder is a unique private space for human users. When your users login into Akeyless, using any Authentication Methods that are email based, e.g. SAML, etc. They will have a completely private space under their personal folder, this folder is for personal usage, and not tied to your Access Roles.

Managing Passwords from the Console

Passwords are a sub-type of Static Secret under the Akeyless Platform and are treated as such, and like with any other item in Akeyless, you may perform several management actions on a password, such as deleting, updating, and so on.

Before starting the creation process, you must decide whether you want this password to be personal or shared with all account users. The console default is the shared account folder, and any user role with permissions for that folder will be able to access the password. If you wish to create a personal password, select the folder icon reading Personal on the menu on the left-hand side of your screen.

If you wish to save passwords from a web form, please go to the Browser Extension section of this page.

Creating a Password

  1. Log in to the Akeyless Console and go to Items > New > Static Secret.

  2. Define a Name for the secret, and optionally specify the Location as a path to the virtual folder in which you want to create the new secret, using slash / separators. If the folder does not exist, it will be created together with the secret.

  3. Fill in the following parameters:

  • Description: Optional, enter a description of the password.

  • Tags: Optional, select one or more tags for the password, or enter the name of a new tag to be added as part of the password creation.

  • Delete Protection: Optional, turn on this setting to protect the password from deletion

  • Type: Mandatory, select the Password type option in order to create a password.

  • Protection Key: Select the encryption key with which to encrypt the password (if your system includes multiple encryption keys). Otherwise, select Default.

  1. Click Next In order to proceed to the next step, and fill in the following parameters:
  • Username: Optional, enter a username to be associated with the password.

  • Password: Mandatory, enter the password you would like to save. You may also generate a password using the icon on the end of the line, hitting it once will open a menu of password options (length, character types, etc), and hitting it again will generate a password according to your specifications.

  • Website: Optional, the URL of the corresponding website,e.g https://console.akeyless.io.

You may create and fill in custom fields by selecting the + Add Field button, but you must make sure that you title them the same. For example, if you wish to add an Account ID to the AWS IAM login page, the field needs to be named Account ID, as to match the page.

  1. Select Finish, your password will be saved and ready to use.

Setting Generation Defaults

If you have a certain password policy in your organization that you wish to preserve across the account, you may adjust the default settings of the password generator described in step 4 of the creation process. Your users will still be able to change the parameters in creation, but the defaults will follow the rule you set.

  1. Select your user icon on the top right-hand corner, and go to Account Settings> Account Settings> Items Settings. scroll all the way down to Password Generation Policy.

  2. Set the following parameters:

  • Character Length: The desired default length of passwords created in your account.

  • A-Z: Check this box to ensure your password is comprised of at least one uppercase letter. If only this box is selected, the password will be comprised of uppercase letters exclusively.

  • a-z: Check this box to ensure your password is comprised of at least one lowercase letter. If only this box is selected, the password will be comprised of lowercase letters exclusively.

  • 0-9: Check this box to ensure your password is comprised of at least one numeric character. If only this box is selected, the password will be comprised of numeric characters only.

  • !@#: Check this box to ensure your password is comprised of at least one special character. If only this box is selected, the password will be comprised of uppercase letters only.

The settings will be saved automatically when you change them.

Using the Browser Extension

While the browser extension will allow you to access all of your Akeyless Secrets, its primary intent is to manage passwords. In order to use or save your passwords on the go, and not have to go to the console every time you want to save or use them, you can install the Akeyless Browser Extension.

After installing the extension and logging into your Akeyless account, you will be able to access the passwords saved in either your personal folder or your account folder, as well as inject or save passwords, by selecting the blue lock icon that will start appearing in your browser web forms. Saving a password from a web form will automatically send it to your personal account.

You will also be able to create new passwords manually, using the same parameters and tools described in the previous section, by selecting the Akeyless icon by your address bar, choosing a folder, and selecting +New.

Setting Generation Defaults

While the Generation defaults are initially taken from the account settings, you may adjust the defaults of your personally generated passwords in the extension by selecting the menu icon on the top right corner of the extension pop-up to adjust your settings.

Tutorial

Check out our tutorial video on the Akeyless Password Manager.