Nowadays team work assumes a shared access to multiple IT services. Such collaboration is not simple, since definite users should know some passwords and not others. Besides, such passwords should be frequently updated, and team members should learn topical authentication parameters. Often this business process becomes a total mess and results in time losses and leak of important data. The situation is especially crucial in case you administrate customers-related services.
This is the tool to solve the trouble. The app let you organize the system of safe passwords keeping with multiple security layers to efficiently structure, find, and share password bundles.
- a core app to manage vaults and passwords. Its price is 198€.
- an extension to add custom fields for password keys. Features assumed by this app are marked by the icon . Its price is 38€.
Shared password vaults for team use
Passwords Sharing Policies
An access to a specific password is regulated on a bundle level. You may have as many bundles as you want. To share a bundle with a definite user, you should specify that user in the access levels' table. Alternatively you can assign a user group in the same table. For example, you can have a 'sales team' bundle and share it with all users with the right 'Sales Manager', or you can have a global bundle by sharing it with a user group 'Internal user'.
3 access levels to bundles, passwords, and tags are distinguished:
- Administrator may access, update or delete this bundle, its passwords, and its tags. This user is assumed to manage access levels for this bundle, to modify update policies, and set the extra password. The bundle creator is always its administrator.
- Full rights user may access, update or delete passwords and tags related to this bundle, but he/she can't change bundle itself and can't change bundle access levels or settings
- Readonly access user may observe and address passwords and tags of this bundle. Such users cannot modify any objects.
Take into account that the rules are not applied for the Odoo super user. The Odoo super admin (with id 1) has full rights for all passwords and bundles, although he is also required to enter the extra paraphrase to open a bundle.
The setting 'Responsible for password updates' allows to assign a user who should regularly change the paraphrase in passwords according to the bundle update policies. For such a user the special activity is automatically and regularly created to make sure passwords are secure. There might be only a single responsible for a bundle, and such responsible should have either the 'Administrator' or the 'Full rights' access level.
Innovative single-view interface
The password manager let you work with a few passwords simultaneously. Click on a password kanban card to add the key to the selection, and then address any or proceed a mass action. Possible mass actions are defined by an Odoo admin on the configuration page.
There are 2 menus to simplify working with passwords. The first - 'Passwords by bundles' - let users open keys of an exact vault. The second – 'All passwords' – let users simultaneously open all available for him/her keys. In the latter case an extra paraphrase for each bundle should be entered.
Screenshots
Passwords are combined in bundles
Passwords single-view interface
Password form view
Password Manager configuration page
Passwords by all available for this user bundles
Passwords auto generation and check
Password strength is estimated in real-time to make sure users do not introduce too week keys.
The app also let you import passwords from electronic tables using the standard Odoo import tools.
Screenshots
Password generator wizard
Import passwords from tables
Encryption and protection of passwords
For each vault you can define update policies in days. If the password has not been changed during the specified period, Odoo will generate an activity for responsible users. To maximize security, change you passwords regularly!
Passwords Security Layers
Although, there is no way to provide 100% security in the Internet, this password manager tries to minimize potential risks.
First of all, the tool symmetrically encrypt all passwords. It means that to decrypt a password, plotters should know the exact decryption algorithm and a bundle decryption key.
Second of all, you can assign the extra security password for any bundle. In such a case to access passwords in the interface, any user should enter a paraphrase. Even if a user has full rights for a bundle, he/she should always know that password. Besides, that paraphrase might be changed at any moment by the bundle admin (if that admin himself knows that paraphrase). Be cautious: do not forget the password. It is hashed and even the PostreSQL super user can't recover it.
Third of all, the security rights are programmed in such a way they can't be changed without the tool source code modification. Even the Odoo super user is not able to change policies.
Screenshots
Passwords access levels
Extra password to open a bundle
Bundle extra paraphrase required
Custom fields and types for password keys
Structure passwords by special types and choose fields for each types individually. Thus, set of columns for 'virtual servers' and 'email servers' might be different.
Screenshots
Passwords' custom fields
Custom fields on password form
Custom fields for password: add any data required
Linked to Odoo contacts
Screenshots
Passwords by partners
Very good password management module
Easy installation and quick setup
Configuration and Installation Tips for Password Manager Odoo v.11
Python dependencies
To guarantee tool correct work you would need a number of Python libraries: zxcvbn, cryptography:
pip install zxcvbn cryptography
Bug reporting
If you encounter bugs or inconsistent behavior, do not hesitate to contact us. We guarantee to provide fixes within 60 days of purchase and are intensely interested in improving our tools even after this period.
You do not need a phone number or credit card to contact us. You should only pass a short email sign-up, which does not take more than 30 seconds.
Please include as many details as possible in your request: screenshots, Odoo server logs, a full description of how to reproduce your problem, and so on. Usually, it takes a few business days to prepare a working plan for an issue (if a bug is confirmed) or provide you with guidelines on what should be done (otherwise).
Public features requests and module ideas (free development)
We are strongly motivated to improve our tools and would be grateful for any feedback. If your requirements are of public use and might be efficiently implemented, the team will include those in our to-do list.
Such a to-do list is processed regularly and does not assume extra fees. Although we cannot promise deadlines and final design, it might be a good way to get desired features without investments and risks.
You do not need a phone number or credit card to contact us. You should only pass a short email sign-up, which does not take more than 30 seconds.
The technical core to synchronize your cloud storage solution with Odoo
398€
The tool to automatically synchronize Odoo attachments with OneDrive files in both ways
487€
The tool to automatically synchronize Odoo attachments with Google Drive files in both ways
487€
The tool to build deep and structured knowledge base for internal and external use. Knowledge System. KMS
398€
The tool for time-based service management from booking appointments to sales and reviews
The tool to set up KPI targets and control their fulfillment by periods. KPI dashboards. Dashboard designer. KPI charts
198€
The tool to combine different Odoo events in a few configurable super calendars. Shared calendar. Common calendar.
88€
The tool to translate URL addresses of Odoo website pages
38€