With the introduction of Passwordstate Version 10, we’ve made some changes to our APIs. That’s great you say, but what’s an API? An API, or Application Programming Interface, is a set of defined rules and protocols that allow a software … [Continue reading]
Firstly, there is no issue with fulfilling some capabilities using a cloud-based Software-as-a-Service (SaaS) approach. Software-as-a-Service capabilities are popular for their quick setup and lower costs (although this isn’t always the case … [Continue reading]
There has been a recent series of articles and reported posts about Browsers and the risk of clickjacking, where bad actors manipulate a user's activity by concealing objects beneath legitimate clickable content. Clickjacking is also known … [Continue reading]
In May we posted our Blog on Alerting For Best Practice Encryption, outlining how Passwordstate offers a Defense-in-Depth option for encrypting your configuration files, and now alerts on configuration files used by Passwordstate that have not yet … [Continue reading]
This week’s blog links in with the theme of controls around accessing credentials, or Password Records in Passwordstate. It follows on from the recent blog posts of Reporting Access To Sensitive Credentials and Getting Started With 2FA. The … [Continue reading]
What is Two-factor Authentication? It’s a security measure that requires a user to verify their identity using two different methods. In doing this, there is an extra layer of security compared to just accessing an account with a username … [Continue reading]
This week’s Blog revisits one written in 2020. The focus being on alerting Security Administrators and other interested people when particular passwords, or credentials, are accessed. But first to recap, Passwordstate uses the concept of a … [Continue reading]
This week’s blog was prompted by a support call we received. A customer was enquiring what was the best way to ensure they were keeping up with the latest information related to Passwordstate Builds and renewals. This post references a … [Continue reading]
Defense-in-Depth. You may have seen this term, or maybe not. What does it actually mean? In its broadest sense, Defense-in-Depth refers to an approach where multiple layers of “defense” are used for protection of a “core”. … [Continue reading]
Introduced in Passwordstate Version 9 Build 9905, passkeys are a phishing resistant credential that can be used to replace passwords. It is a cryptographic credential, based on asymmetric public-key cryptography and uses a public-private key pair. … [Continue reading]