Keycyte PAM 3.2 · Administrator Guide
Password Vault
The password vault stores the privileged accounts that Keycyte PAM uses to log users in to servers, and other secrets such as certificates, API keys and secure notes. Every entry is stored encrypted. Users of the Client Panel connect with vault accounts without seeing their passwords, unless a password role allows them to copy the password.
To open the vault, select Password Vault in the menu. A MASTER sees all entries; an ADMIN sees only the entries that the ADMIN owns, with the permission level that is set for the ADMIN on each entry.
This section contains the following topics:
| Topic | Description |
|---|---|
| Account Types | The account and secret types and which of them Keycyte PAM can rotate. |
| Adding Accounts | Creating an entry, linking it to servers, the main account of a Windows service, Su/Sudo escalation and owners. |
| Changing Passwords | Changing, setting and verifying passwords, password history and bulk changes. |
| Recycle Bin | Restoring deleted entries or deleting them permanently. |