In the new version of the browser extension, we have made it possible to set a mandatory PIN code for all users and improved its protection mechanism against brute-force attacks, we have enhanced the password search algorithm and introduced a number of UI improvements.

Now administrators can set PIN codes to be mandatory for all users. If no PIN code is set, users will be prompted to create one when they log in to the browser extension.

After each failed attempt to enter a PIN code, the input field will be blocked and cleared automatically. After five failed attempts to enter a PIN code, the extension will log a user out and reset the previously entered host address.

Password search to autofill login forms will occur across all passwords available to the user, not just the current domain.

The browser extension is available for Google Chrome, Apple Safari, Microsoft Edge, and Mozilla Firefox.

In the new version, we have added the option to set a mandatory browser extension PIN code for all users, significantly expanded the list of events displayed in the Activity log, improved working with LDAP group lists, and made it possible for administrators to configure user access rights to password history and notifications related to their changes.

Now administrators have the option to make the browser extension PIN code mandatory for all users. If no PIN code is set, users will be prompted to create one when they log in to the browser extension.

With the new ‘Who can view the history of actions with passwords’ setting, it is possible to grant users (with access levels below Admin) the right to view password history, password editions, and notifications of their changes — these features were previously available only to vault administrators.

Now all changes in the Account settings, User management, LDAP settings, SSO settings, License info, and Background tasks are displayed in the Activity log.

s

Automatic updating of LDAP group lists can now be configured on the Groups tab in the LDAP settings. The update is performed through background tasks with a selected time interval.

⚙️ The update is available on the customer portal

In the new version, we have improved the autofill algorithm, modified the PIN code request, and made minor changes to the interface and localization.

The browser extension is available for Google Chrome, Apple Safari, Microsoft Edge, and Mozilla Firefox.

We recommend updating Passwork due to security fixes and improvements.

In the new version, we have updated the manifest to the latest version, improved password search, modified the PIN code storage format, and introduced a number of changes for a smoother user experience.

The browser extension is available for Google Chrome, Apple Safari, Microsoft Edge, and Mozilla Firefox.

In this new version, we have added a feature which makes it possible to grant ordinary users some administrative rights without making them administrators. This option is a response to one of the most frequent requests from our customers. Additionally, we have revamped the hiding of vaults and expanded the features of private vaults.

 (Available with the Advanced license)

In this new version, there is no need to make users administrators in order to provide access to specific settings or User management. Now, you can grant users only certain administrative rights and flexibly customize the sections which they can access and modify.

For example, you can allow employees to create new users and view the history of user actions, track settings changes while restricting access to organization vaults and System settings.

In the previous versions of Passwork only organization administrators were able to hide vaults. Also, only organization vaults could be hidden. In this new version, all users can hide any vaults. Hiding makes vaults invisible only for the user who choose to do it and does not affect others.

Besides hiding private vaults, employees with User management access can now see all vaults which they administer (including private vaults). Private vault administrators can view all events related to their vaults in the Activity log.

This new version introduces the Bin – deleted folders and passwords can now be easily restored. Additional protection from accidental vault deletion and brute force attacks on 2FA has been added, LDAP synchronization has been accelerated, API settings have been improved, and role management errors have been fixed.

Now, to confirm the deletion of a vault, its name must be entered. It will be permanently deleted along with all the data contained in it.

Protection against 2FA brute force has been added – after several attempts of entering incorrect 2FA codes, the user will be temporarily blocked. The number of attempts, input interval, and block time are set in the config.ini file.