Password Management Software Questions & Answers

Primary elements that support compliance standards include:

• SOC 2
• GDPR(General Data Protection Regulation)
• CCPA(California Consumer Privacy Act)
• FedRAM
• NIST
• HITRUST CSF

Password vault encrypts stored credentials by using the master passwords to drive a unique encryption key via a key derivation function(like PBKDF2 or Argon2).

Multi-factor authentication is integrated by adding extra validation steps:

• Mobile push notification
• SMS Code
• Biometrics scan

After the user enters their password.

Steps to manage Secure Notes include:

• Create / Lock
• Set Password
• Automatic Looking
• Sync Securely
• Recover/ Backup

Basic emergency access features include:

• Communication and alerting (multimodal alerts, two-way communication)
• Personal Mobile Safety (emergency iOS, emergency location service)
• IT and Privileged Access Management (just-in-time, break glass account)
• Physical Access Control (fire panel linkage, global interlock, and lockdown)

SSO providers integrate VIA protocols like SAML, OIDC, and OAuth 2.0 with diverse applications.

A few supported platforms include:

• Identity provider - Active Directory, One Login
• SAAS and Web Application - Zoom, Slack
• Infrastructure and Cloud - SharePoint, Citrix

Steps to manage Secure Notes include:

• Create / Lock
• Set Password
• Automatic Looking
• Sync Securely
• Recover/ Backup

Harshicorp Vault supports a wide range of authentication methods. Essential vault authentication methods are: Approle, TLC Certificate, token, username, and password.

Primary audit logs and tools for monitoring credential access include:

• Identity and access management (IAM)
  • Microsoft Entra ID
  • AWS Cloud Trails
• Operating System and local audit logs
  • Window Security Logs
  • Vault Logs
• Application-specific and third party Logs
  • SSO (Single Sign On) Logs
  • VPN Okta Logs

Password autofill feature works in the browser by extracting data from the browser or system cookie. When it finds a match for a particular field in particular page, it automatically fills all required information for you.