Release notes

Passwork 7.0

15min
in passwork 7 we have improved everything we have completely rewritten the code using the latest technologies, implemented a full fledged api, updated the ui, reworked groups and roles, removed the automatic addition of administrators to vaults and made access rights management even more flexible this will make administering and working with passwords significantly more convenient, as well as let us roll out new features quicker updated ui we’ve updated passwork ui and redesigned the key areas of the app based on your feedback the ui update keeps the familiar workflow, while fixing a number of flaws and improving ui personalization, which now lets you set column width or move elements around new backend and frontend we’ve completely revamped the code using more up to date methods this will improve performance and make installing passwork easier and allow for api based integration and automatization for all processes this code will serve as a foundation for the upcoming desktop apps and will help us release new passwork features quicker expanded api capabilities we've significantly expanded the api functionality, now you can use it to interact with all passwork features from copying passwords to managing users and security settings to make working with the api simpler, we've made an official python connector a library for developers that lets you integrate passwork with python applications and scripts, and a passwork cli utility that allows using the api from the command line instead of api keys, we now use tokens, which are a more modern and reliable way to access the system in addition, we've moved the api access settings to the role page custom roles the status system has been changed we’ve renamed statuses to roles , and now they include administrative rights and custom settings, which means you will be able to create an unlimited number of roles with customized rights and settings, instead of simply choosing between an administrator or member status user groups what previously was roles is now called groups , which makes user management more intuitive and closer to commonly accepted standards, for example those used in active directory groups help tailor users' access to vaults based on set permission levels updated vault structure vault structure has become simpler now there are no organization vaults, and all vaults created are private by default a private vault becomes a shared one once you invite other users to it at the same time, administrators don’t get automatic access to newly created vaults the updated structure supports strong encryption and expands password management capabilities, making the process more convenient and safe vault access confirmation now, when you add regular or ldap users into groups, they won’t automatically gain access to other users’ vaults instead, the vault’s administrator will have to confirm their access request this adds another security layer by restricting unauthorized access to vault contents changes to access levels we’ve reworked the access level system and introduced a number of changes to some of them navigation level has been replaced by an ability to view all parent directories of the folder the access level is applied to users with the full access level now can view access levels of other users, manage additional access, view the history of changes within the directory and analyze passwords available to them via security dashboard history of actions and notifications we’ve expanded the list of actions that are logged, updated their descriptions and completely reworked the notification system soon after the release we are going to introduce notification settings, which will add flexibility to keeping track of important changes and user actions using shortcuts in order to enhance security, we’ve made some changes to the way shortcuts work it is now impossible to copy shortcuts for passwords which don’t allow shortcut creation folders which include shortcuts unavailable to a user will now be copied without them adding tags to passwords now when you create or edit a password, you will be able to pick a tag from a list of already created ones this has an added benefit of preventing creation of tags with the same name (sales ↔ sales, etc ) when selecting tags, only those available in the user's vaults will be displayed changes to 2fa reset flow when you reset your authorization password, two factor authentication now won’t be reset along with it users won’t be able to reset 2fa without a successful login, which increases security account locking option we’ve introduced an account locking feature you will be able to set a limit on failed login attempts, timeframe for tracking the failed attempts and lockout duration other changes tidied settings up by making their structure more clear added automatic retrieval of email and name from single sign on systems (sso) added settings for automatic clearing of sessions, notifications and background tasks added the ability to enable a system banner that will be visible to all passwork users you can use it for important notifications, alerts or instructions added an ability to choose a time zone and date & time format updated filters in key sections for faster and simpler search upgrading to passwork 7 to upgrade to version 7 0, you’ll need to update your passwork to version 6 5, migrate your data, and confirm this in the customer portal upgrade instructions can be found migration to passwork 7 docid\ dh3vnbq gxhq3aa w4tvf we recommend exploring the new features and data migration specifics in a test environment before updating your self hosted version for testing, you can deploy passwork 7 on a separate server — this will allow you to review all the changes in the new version without affecting your current working environment