new

improved

fixed

Passwork 6.2

Passwork Telegram 6
This new version introduces the Bin – deleted folders and passwords can now be easily restored. Additional protection from accidental vault deletion and brute force attacks on 2FA has been added, LDAP synchronization has been accelerated, API settings have been improved, and role management errors have been fixed.
Bin
  • In the Bin, users can view only deleted items from those vaults where they are administrators
  • When restoring deleted folders to their initial directories, user access rights and roles from those folders will also be restored
  • If passwords have been sent to users, they will disappear from their “Inbox” when moved to the Bin, the associated links and shortcuts to these passwords will become invalid
  • When restored from the Bin, additional access rights to passwords can be restored as well – they will reappear in the “Inbox” section, all associated links and shortcuts will become valid again
  • Vaults are deleted without being moved to the Bin
Protection against accidental removal of vault
Now, to confirm the deletion of a vault, its name must be entered. It will be permanently deleted along with all the data contained in it.
Protection against 2FA brute force
Protection against 2FA brute force has been added – after several attempts of entering incorrect 2FA codes, the user will be temporarily blocked. The number of attempts, input interval, and block time are set in the config.ini file.
Other changes
  • LDAP synchronization has been accelerated
  • Descriptions of parameters and minimum allowed values for API token expiration time and API refresh token expiration time have been added to the API settings section
  • Automatic assignment of “Navigation” to parent folders in role management has been fixed
  • The issue when a vault administrator could not add roles to a vault and manage their permissions has been fixed
  • The issue with showing additional access rights to passwords when moved to another vault has been fixed