Workforce Password Management
Securely store, manage and share business application credentials.
Workforce Password Management
Identity security controls you know and trust
Secure your business app credentials with the power of CyberArk’s industry-leading Identity Security Platform.
Centralize
Automatically capture and store credentials in the CyberArk secure vault and launch all business applications from a single intuitive portal
Collaborate
Empower users to share credentials and secure notes while controlling credential ownership rules and permissions
Control
Enforce strong controls over your business application credentials, including layered access protections, role-based permissions, and user activity audits
Visibility and control for IT, simplicity and speed for employees
Enforce strong controls over your business application credentials, including layered access protections, role-based permissions and user activity audits.
Store credentials in the cloud or On-Premises Vault
Leverage CyberArk Identity Cloud or CyberArk Self-Hosted Vault for secure storage of password-based credentials and notes, encrypted end-to-end. Passwords stored in the vault do not require a VPN for retrieval.
Enforce Multi-factor Authentication
Integrate Workforce Password Management with CyberArk Multi-factor Authentication (MFA) to require step-up authentication challenges for specific users and apps.
Control How credentials are managed and shared
Restrict which users can view, edit or share credentials and specify the duration of shared access. Automatically transfer ownership when the primary owner leaves the organization without losing the chain of custody.
Capture and auto-fill credentials with the browser extension
Automatically recognize when users enter credentials and offer to add new apps to the user portal for convenient access. Securely auto-fill credentials fields for a smooth and quick login experience.
Audit activity and demonstrate compliance
Track user access activity and gain visibility into shared application access with built-in reports that provide a comprehensive history of credential updates and access events.
Store more than passwords
Enable users to secure text-based notes, such as license keys, PINs, serial numbers or sensitive data related to apps in one place without caching them on the endpoint.
Reduce friction and risk
Authenticate users with their existing enterprise credentials without requiring a master password. Workforce Password Management easily integrates with corporate directories and third-party identity providers.
Security, privacy and availability enterprises demand
CyberArk Workforce Password Management satisfies enterprise security, privacy and uptime needs.
CyberArk Workforce Password Management never stores or caches credentials on end-user devices.
CyberArk has no access to credentials or app-related data. All credentials are encrypted end-to-end in transit and at rest.
CyberArk guarantees a 99.99% uptime SLA to ensure users can access their business app credentials.
Plan
Workforce Password Management
(Included in all CyberArk Workforce Identity and Privileged Access Management Packages)
Standard
CyberArk Identity App Catalog
Role-based access policy
B2B federation
MFA using OATH tokens and security questions
MFA using a third-party RADIUS server
Cloud Directory
Custom Domain URLs (e.g. www.company.com/login)
Integrations to AD, LDAP, and Google Cloud Directory
Custom user attributes
Directory APIs
SCIM server
Email OTP
Physical FIDO U2F-based keys
Hardware OTP Tokens
KBA(Security Questions)
OATH-based desktop authenticator
OATH-based mobile authenticator apps
Mobile push notifications
Derived credentials
Smart cards
Offline OTP
SMS-based OTP
Phone call
Wearable as a token
QR Code
Browser-based user portal
CyberArk Identity mobile app
Self-service password update and reset for AD accounts
Self-service AD profile update
Self-service AD account unlock
Administrator reports
SIEM integration
Show features
Workforce Password Management
(Included in all CyberArk Workforce Identity and Privileged Access Management Packages)
Standard
CyberArk Identity
Role-based access policy
B2B federation
MFA using OATH tokens and security questions
MFA using a third-party RADIUS server
Cloud Directory
Custom Domain URLs (e.g. www.company.com/login)
Integrations to AD, LDAP, and Google Cloud Directory
Custom user attributes
Directory APIs
SCIM server
Email OTP
Physical FIDO U2F-based keys
Hardware OTP Tokens
KBA(Security Questions)
OATH-based desktop authenticator
OATH-based mobile authenticator apps
Mobile push notifications
Derived credentials
Smart cards
Offline OTP
SMS-based OTP
Phone call
Wearable as a token
QR Code
Browser-based user portal
CyberArk Identity mobile app
Self-service password update and reset for AD accounts
Self-service AD profile update
Self-service AD account unlock
Administrator reports
SIEM integration
Show Features
Explore
related
resources
Focus on running your business,
not reacting to threats.
