Workforce Password Management

Securely store, manage and share business application credentials.

 

Identity security controls you know and trust

Secure your business app credentials with the power of CyberArk’s industry-leading Identity Security Platform.

Data Processing Addendum Icon

Centralize

Automatically capture and store credentials in the CyberArk secure vault and launch all business applications from a single intuitive portal

Collaborate

Empower users to share credentials and secure notes while controlling credential ownership rules and permissions

Get a Front-Row Seat to Security Innovation icon

Control

Enforce strong controls over your business application credentials, including layered access protections, role-based permissions, and user activity audits

Visibility and control for IT, simplicity and speed for employees

Enforce strong controls over your business application credentials, including layered access protections, role-based permissions and user activity audits.

Store credentials in the cloud or On-Premises Vault

Leverage CyberArk Identity Cloud or CyberArk Self-Hosted Vault for secure storage of password-based credentials and notes, encrypted end-to-end. Passwords stored in the vault do not require a VPN for retrieval.

secure storage

Enforce Multi-factor Authentication

Integrate Workforce Password Management with CyberArk Multi-factor Authentication (MFA) to require step-up authentication challenges for specific users and apps.

CyberArk Vault

Control How credentials are managed and shared

Restrict which users can view, edit or share credentials and specify the duration of shared access. Automatically transfer ownership when the primary owner leaves the organization without losing the chain of custody.

Smiling young businesswoman shaking hands with an office colleague

Capture and auto-fill credentials with the browser extension

Automatically recognize when users enter credentials and offer to add new apps to the user portal for convenient access. Securely auto-fill credentials fields for a smooth and quick login experience.

man typing

Audit activity and demonstrate compliance

Track user access activity and gain visibility into shared application access with built-in reports that provide a comprehensive history of credential updates and access events.

woman typing on laptop

Store more than passwords

Enable users to secure text-based notes, such as license keys, PINs, serial numbers or sensitive data related to apps in one place without caching them on the endpoint.

door with a lock

Reduce friction and risk

Authenticate users with their existing enterprise credentials without requiring a master password. Workforce Password Management easily integrates with corporate directories and third-party identity providers.

man smiling at the computer

Security, privacy and availability enterprises demand

CyberArk Workforce Password Management satisfies enterprise security, privacy and uptime needs.

CyberArk Workforce Password Management never stores or caches credentials on end-user devices.

CyberArk has no access to credentials or app-related data. All credentials are encrypted end-to-end in transit and at rest.

CyberArk guarantees a 99.99% uptime SLA to ensure users can access their business app credentials.

Plan

Workforce Password Management

(Included in all CyberArk Workforce Identity and Privileged Access Management Packages)

Standard

Access Management

CyberArk Identity App Catalog

Role-based access policy

B2B federation

Basic web multifactor authentication (MFA)

MFA using OATH tokens and security questions

MFA using a third-party RADIUS server

Directory services

Cloud Directory

Custom Domain URLs (e.g. www.company.com/login)

Integrations to AD, LDAP, and Google Cloud Directory

Custom user attributes

Directory APIs

SCIM server

Supported factors

Email OTP

Physical FIDO U2F-based keys

Hardware OTP Tokens

KBA(Security Questions)

OATH-based desktop authenticator

OATH-based mobile authenticator apps

Mobile push notifications

Derived credentials

Smart cards

Offline OTP

SMS-based OTP

Phone call

Wearable as a token

QR Code

User self-service

Browser-based user portal

CyberArk Identity mobile app

Self-service password update and reset for AD accounts

Self-service AD profile update

Self-service AD account unlock

Reporting

Administrator reports

SIEM integration

Show features

Workforce Password Management

(Included in all CyberArk Workforce Identity and Privileged Access Management Packages)

Standard

Access Management

CyberArk Identity

Role-based access policy

B2B federation

Basic web multi-factor authentication (MFA)

MFA using OATH tokens and security questions

MFA using a third-party RADIUS server

Directory services

Cloud Directory

Custom Domain URLs (e.g. www.company.com/login)

Integrations to AD, LDAP, and Google Cloud Directory

Custom user attributes

Directory APIs

SCIM server

Supported factors

Email OTP

Physical FIDO U2F-based keys

Hardware OTP Tokens

KBA(Security Questions)

OATH-based desktop authenticator

OATH-based mobile authenticator apps

Mobile push notifications

Derived credentials

Smart cards

Offline OTP

SMS-based OTP

Phone call

Wearable as a token

QR Code

User self-service

Browser-based user portal

CyberArk Identity mobile app

Self-service password update and reset for AD accounts

Self-service AD profile update

Self-service AD account unlock

Reporting

Administrator reports

SIEM integration

Show Features

Explore
related
resources

Focus on running your business,
not reacting to threats.