Web-based Convenience
Manage passwords from any machine with Internet access. Or, install Secret Server password manager locally on your own network.
Read about web-based password management >
Share Secrets Securely
Multi-user password management is easy with Secret Server. Share passwords and Secrets among other users and groups with just a few clicks.
Read about sharing passwords and other sensitive information >
Manage Groups
Secret Server enables administrators to manage multiple users through Groups. Users can belong to different groups and receive the permissions attributed to those groups.
Read about managing users in Groups >
Create New Secrets
Secrets are individually named sets of sensitive information and can address a broad spectrum of secure data. Secret security can be centrally managed, and the folder structure allows one or more Secrets to inherit permissions from a parent folder.
Read about creating Secrets
Secret Templates
Secrets are configured using templates called Secret Templates. Secret Server has many preinstalled templates to handle the data of sensitive information such as: admin account passwords, database passwords, web passwords, router passwords, Active Directory passwords, bank account information, credit cards etc.
Read about Secret templates.
Search and Browse
Managing passwords is easy when you have an efficient method of locating them. Search for secrets using a simple text search.
Read about searching and browsing in Secret Server >
Folders
Secrets can be organized into folders to seperate based on customers, geography, business units or teams (eg. DBAs, UNIX admins and Windows Server Admins). Folders can be nested within other folders at any number of levels to represent a useful structure.
Read about folder organization in Secret Server >
Import Secrets
Import large numbers of Secrets from an Excel or csv/tab delimited file. Integration with legacy systems is easy.
Read about importing Secrets in Secret Server >
Custom Reports
Administrators can create custom reports based on any Secret Server information stored in the database (e.g. users, audits, permissions, folders, etc.). You can also organize your reports into custom built Report Categories.
Read about Custom reports >
Audit Reports
Track every single read, write or permission change--essential for assessing vulnerability when someone leaves your company.
Read about Audit Reports >
File Attachments
Protect your documents the same way you secure your passwords. Attach pictures, PDFs, zip files, and spreadsheets.
Read about attaching a file while creating or editing a Secret >
Password History
Password History allows you to store all previous passwords for an account.
Read about password history >
Role Based Access Control
Secret Server ships with three Roles: Administrator, User, and Read-Only User. Each Role contains various permissions to match the job function of the User.
Read about Role Based Access Control >
Dashboard
Dashboard is a dynamic drag and drop UI which helps improve efficiency and increase data access from a single screen.
Read about Dashboard >
Themes
Secret Server comes with four standard themes and is fully customizable for any branding or personal touches.
Read about Themes >
Expiring Secrets
Secrets can be set to expire at certain intervals, reminding users when sensitive data needs review.
Read about Expiring Secrets >
Change Network Passwords
Change network passwords and synchronize Scheduled Tasks, Service Accounts and IIS App Pools instantly.
Read about changing network passwords in Secret Server > >
Email Notifications
Receive email notification when shared Secrets are changed. It's also a convenient way to alert your team of password changes.
Read about email notifications in Secret Server >
Command SSH
Custom Commands for RPC and Heartbeat gives administrators the ability to craft their own Password Changers with the flexibility to target any SSH or Telnet device .
Read about Command SSH >
Heartbeat
Heartbeat allows effective, up to the minute monitoring of credentials across a company network.
Read about Heartbeat >
Event Subscriptions
Event Subscriptions can be setup to send an email alert when a specific action is performed or when an event within the system takes place.
Read about Event Subscriptions >
Remote Agent
Remote Agents keep Secrets up to date on external networks by allowing Remote Password Changing and Heartbeat to occur on networks not directly connected to Secret Server (e.g. DMZ vs. internal or over the internet).
Read about Agent >
Check Out
The Check Out feature forces accountability on Secrets by granting exclusive access to a single User with a One Time Password (OTP).
Read about Check Out >
Request Access
The Request Access feature requires a User to be granted approval to access a Secret.
Read about Request Access >
Require Comment
Require Comment is a security setting that requires a User to enter a reason everytime a Secret is accessed.
Read about Require Comment >
Active Directory Integration
Log in to Secret Server using your workstation account and have one less password to manage.
Read about Active Directory Integration in Secret Server >
RDP / PuTTY Launcher
Secret Server's Launcher opens a connection to the remote computer using Remote Desktop or PuTTY. It can also log into a website using the Secret's credentials directly from the web browser.
Read about Launcher >
iPhone App
Keep your critical passwords at your fingertips at all times. Our iPhone app comes with enterprise-level security.
Read about the Password Manager app for iPhone >
BlackBerry App
Keep your critical passwords at your fingertips at all times. Our BlackBerry app comes with enterprise-level security.
Read about the password manager app for BlackBerry >
API (Web Services)
Web Services allows Secret Server to be accessed using mobile app, third party applications, and scripts - with proper authentication.
Read about Web Services >
Firefox Extension
A custom Firefox extension ensures that Firefox has access to all Secret Server's great features.
Read about Firefox for Secret Server >
CRM Integration
Secret Server integrates with industry applications such as ConnectWise, AutoTask and Microsoft CRM.
Read about CRM integration >
Cisco Enable / UNIX root
Using the customizable command sets, specific Cisco commands can be targeted at any Cisco device with SSH or Telnet access.
Read about Cisco Enable >
Import Tool
Secret Server offers a migration utility to import Secrets from other applications.
Read about Import Migration Tool >
Virtual Machine Support
Secret Server can be installed on a Virtual Machine, such as VMWare, using the exact same process as a standard server installation.
Read about Virtual Machine Support >
SOX Compliance
Password management is a critical aspect in obtaining SOX compliance and Secret Server can help.
Read about SOX Compliance >
PCI DSS Compliance
Secret Server can help vulnerability management and access control measures which all relate to password management.
Read about PCI DSS Compliance >
MASS Regulation 201 CMR 17
Secret Server can help meetthe Massachusetts Data Protection Law which mandates that all organizations protect access to personal information for Massachusetts residents.
Read about MASS Regulation 201 CMR 17 >
AES 256 bit encryption
Among many other security features Secret Server uses AES 256 bit encryption on each Secret to ensure maximum security.
Read about AES 256 Encryption >
SHA-512 Hashing
Secret Server's passwords are hashed in the database using the SHA 512 hashing function. A hash function differs from an encryption method, because a hash function when used correctly is computationally infeasible to reverse.
Read about SHA-512 Hashing >

t
Two-Factor Authentication
This feature provides additional security for your password manager.
RADIUS-based authentication is also supported.
Read about two-factor authentication > >
Password Generation
Passwords can be automatically generated using the settings of the template used to create a Secret.
Read about Password Generation >
FIPS 140 Compliance
Secret Server accomodates Federal government departments and private industries needing to achieve this standard by using a FIPS compliant algorithm.
Read about FIPS 140 Compliance >
RADIUS Authentication
Secret Server can integrate with RADIUS to provide a more robust and secure level of user authentication.
Read about RADIUS Authentication >
DoubleLock
Unique to Secret Server, DoubleLock provides an additional layer of security by encrypting Secret data with a custom encryption key.
Read about DoubleLock security >
IP Restrictions
Secret Server can be configured to only be accessible by IP addresses within a specific range. This allows control over the locations and networks that users can access Secret Server.
Read about IP Restrictions >
Automatic Backups
Schedule automatic backups with one click, ensuring that the latest database can be restored at any time.
Read about automatic backups >
Cleartext Export
The Admin Export feature allows administrators to export Secrets to a plain text CSV file.
Read about Cleartext Export >
Unlimited Admin
Unlimited Administration Mode or "Break the Glass" is a feature designed to allow an Administrator access to all Secrets and Folders in their Secret Server instance without explicit permission.
Read about the Unlimited Admin > feature
Database Mirroring
Secret Server supports SQL database mirroring to create a real-time backup of all the stored data. With SQL mirroring, the SQL database can be configured with a primary, secondary and witness server to set up automatic failover.
Read about Database Mirroring >