- Azure Automanage: Configuring Azure VMs according to best practices - Mon, Nov 23 2020
- Configuring vSphere with Tanzu HAProxy VM - Fri, Nov 20 2020
- AdRem Software NetCrunch v11: Compelling monitoring solution with new features - Tue, Nov 17 2020
Password managers help protect some of the most sensitive information in your environment: accounts and passwords. In this review, we look at Devolutions Password Hub, a newer password manager on the scene. We'll examine its features and capabilities.
One of the daily requirements of IT admins and other end users is accessing business-critical systems. This involves using "hopefully" many different usernames and complex passwords to access different key systems in the environment. Today's compliance and regulatory requirements require protecting and controlling access to sensitive data, such as passwords. Most IT admins use a password manager of some sort to help remember these different accounts and passwords.
Which password management solution do you use? Are you looking for a new password manager? Recently, Devolutions released a password management solution called Devolutions Password Hub that provides a great number of features. What capabilities does Password Hub provide? In this review and walkthrough of Devolutions Password Hub, we will take a closer look at using this new password manager.
What is Devolutions Password Hub? ^
Password Hub provides a unique look and feel to the enterprise-quality features it possesses. This cloud-based password solution provides password management for an entire organization of users who need access to various passwords for daily operations.
You can access your Password Hub vault via either a web browser, mobile apps, or by an application you can download from Devolutions. Just a few of the features it touts include the following:
- Cloud-based: access your password vault from anywhere at any time
- Optional "fat" client: provides an "application" feel
- Two-factor authentication (2FA): bolster security with a second means of identity verification
- Role-based access control: configure access to passwords contained in Password Hub based on a user's defined role
- Users can access accounts without seeing the login information: keep information private
- One-click login capabilities: provide easy access
- Credential injection and automatic web login: automatically use information in Password Hub to log in to resources
- Built-in password generator: generate strong, complex passwords right from within Password Hub
- Full auditing and accounting: see all user actions that have taken place within Password Hub
- Cross-platform solution: provides installers for Windows, Mac, and Linux as well as mobile apps for Android and iOS devices
- Protected by enterprise encryption: AES 256-bit encryption protects data stored in Password Hub
Walkthrough of Password Hub features ^
While we are not going to detail the exact steps to set up Password Hub, it is extremely easy. You simply sign up on the Devolutions Password Hub using your Devolutions account and choose to create a new Password Hub. Devolutions offers a 30-day trial of Password Hub, which gives you full access to the features for that period.
One detail to note: Devolutions will send you a temporary vault password via email. You will need to enter this initially when logging into your Password Hub account. It will then prompt you to change it.
After configuring everything so it was ready to go, I first noticed Password Hub's very uncluttered and intuitive interface. The interface is modern and works as you would expect without any quirks.
As you can see below, the interface is very streamlined and does not distract you from the task at hand: managing accounts and passwords. Each user gets a Private vault in addition to the shared Vault. As you would expect, the private vault gives users an area to store private information specific to them alone.
Adding a new entry
Simply click the green + icon to create a new entry. As you will notice, they have organized the various accounts you can add by categorizing them as follows:
- General: general credential types, such as websites
- Session: RDP, SSH, Telnet, and others
- Information: bank accounts, credit cards, driver's licenses, email accounts, and others
It helps to expand the use case from simply keeping passwords to other types of information we often don't think about as keeping in a safe place. These include numbers for bank accounts, credit cards, driver's licenses, passports, social security cards, alarm codes, software license keys, wireless access points, and others.
The types of end users who may need access to secure information can certainly include personnel outside IT groups, such as accounting. These users benefit from these additional information types.
Adding users to Password Hub lets you assign the users to various vaults and assign permissions as to the level of access the users have to the entries in the Password Hub vault. Under Administration > Users, you can choose to invite a single user or multiple users en masse.
Inviting new users is a simple process of entering their names, email addresses, and choosing whether they are administrators and whether to enable their accounts.
Users will receive an invitation email and temporary master key, which is the key for their private vault. When the users first log in, the program will ask them to reset it.
Assigning and using permissions
Password Hub lets you add users at the vault level and assign the predefined roles with their permissions or create custom permissions. As you can see, you can get granular with the permissions assigned, including whether the users can even view passwords.
Devolutions Password Hub integrations
Devolutions has many other nifty tools that can make your life easier as an IT admin. One is the Remote Desktop Manager we have looked at previously. You can integrate with Devolutions' other utilities quite easily.
Devolutions also has other tools that take advantage of Password Hub and the credential information stored there. These include:
- Devolutions Web Login: allows autocompleting web entries via a Chrome extension
- Devolutions Launcher: allows launching sessions and connections to resources using credentials in Password Hub
- Devolutions Authenticator: two-factor authentication app
- Password Hub Importer: imports entries into Password Hub; currently this supports Password Server and Remote Desktop Manager and will support more in the future
Devolutions Web Login
Perhaps the integration that will appeal to most end users across the board is the Web Login tool. This tool takes credentials from Password Hub and injects them into the website the credentials are for. Find the extension and add it to Chrome.
The extension will show up in Chrome. You will then log in to your Password Hub account. After that, the extension has access to the website-related account entries in your vault. You can then autocomplete login information and so on.
My one tiny negative impression about this is it is another piece of software you have to install to get this functionality. Other password managers can natively autocomplete web credential injection.
Devolutions offers Password Hub as a subscription service based on the number of users accessing the service. The price breakdown of the Password Hub subscription service is as follows:
- 1–10 user package: $50
- 11–25 user package: $100
- 26–50 user package: $150
- 50–100 user package: $200
Password Hub impressions and final thoughts ^
Overall, I was pleasantly surprised with Password Hub from Devolutions. It provides a really nice, modern, and fluid interface. You can install it as a full-blown application on Windows 7 or later, macOS 10.10 or later, Ubuntu Linux 12.04 or later, Fedora 21, and Debian 8. Mobile apps exist for Android and iOS. This means you can access passwords from anywhere and virtually any device.
Many other nice Password Hub features include 2FA, roles and granular permissions, the concept of private vaults for all users, and many application integrations that work with it from Devolutions. Adding other sensitive information in Password Hub (such as entries for card numbers and codes) helps broaden the types of information password managers can store.
The app is still relatively new, so some features you may be used to seeing could be missing at this point. However, Devolutions has been churning out new releases, and they will no doubt continue to improve the platform.
If you are looking for a new password manager or one with cloud connectivity and many other features, be sure to check out Password Hub via the fully featured 30-day trial version.