Password Depot 19.2.2

Overview

Password Depot is a credential and secrets management product developed by AceBIT with editions for personal use and enterprise deployment. The product family includes desktop clients for Windows, macOS and Linux, native mobile apps for iOS and Android, browser extensions, a web client and an on-premises Enterprise Server. Databases and entries are encrypted at rest with AES-256 and client-server communications use TLS 1.3.

Purpose and positioning

Designed to provide centralized storage for passwords, tokens, keys and confidential files, Password Depot aims to serve both individual users and organizational IT teams that require managed access controls and traceability. The Enterprise Server is intended for organizations that prefer data residency and operational control inside their own infrastructure or Azure tenant rather than relying on a vendor cloud.

Security and compliance

Security features and claims are described with concrete controls. The vendor states that databases and individual entries use AES-256 encryption while transport layer security is handled with TLS 1.3. The company’s information security management system is certified to ISO/IEC 27001:2022 by TÜV NORD. An external penetration test was carried out by SySS GmbH, according to vendor documentation.

On-premises operation and deployment options are emphasized as mechanisms to keep sensitive data within an organization’s own security perimeter. The Enterprise Server supports integration with existing identity systems, enabling centralized authentication and authorization models that can be aligned with an organization’s compliance needs.

Core features

• Encrypted vaults for passwords and secure notes with AES-256 protection.
• Automatic password generation and automatic form filling via browser extensions and native clients.
• Support for biometric unlocking on mobile clients (Face ID, Touch ID) and platform autofill on iOS.
• Secure storage for a range of secret types, including API tokens, SSH keys, certificates and confidential files.
• Time-based one-time password (TOTP) generation for entries in certain client editions.
• Clipboard auto-clear and protection against screenshots and screen recording on mobile platforms.

Platform support and client distribution

Desktop clients are available for Windows, macOS and Linux. Windows distribution includes separate 32-bit and 64-bit builds. The download center on the vendor site lists installers and checksums for distribution files. Mobile apps exist for iOS and Android, with the iOS edition described as a native app that supports Face ID/Touch ID, autofill and the option to store vaults locally or on cloud services such as Dropbox, Google Drive, OneDrive and others.

A web client is offered to provide browser-based access without a local installation; the vendor also publishes portions of the web client as open source on GitHub where access is available by request.

Enterprise deployment and identity integration

Enterprise Server can be operated in a customer-controlled data center or in an Azure tenant. The product integrates with Active Directory and Microsoft Entra ID for user and group synchronization and supports single sign-on and multi-factor authentication. Authentication methods include Kerberos SSO, OpenID Connect and FIDO2/WebAuthn for hardware-backed second factors.

Server-side permission controls extend down to databases, folders and individual entries. The server also supports SCIM for automated provisioning and deprovisioning, and Syslog export in RFC 5424 format for SIEM integration and centralized log analysis.

APIs, automation and developer use

REST API v2.0 is provided to integrate secrets into automation, DevOps pipelines and internal AI workflows. The API is described as enabling automated access to secrets without embedding credentials in scripts, prompts or local configuration—while preserving centralized permission management and auditability.

Auditability, sharing and access control

Audit logs and tamper-evident trails capture logins, changes, administrative actions and sharing events. Logs can be forwarded to Syslog servers. Sharing workflows include time-limited links, an approval-based four-eyes sharing mode and notification mechanisms for sealed entries. These controls are positioned to provide traceability for sensitive credential use and to support organizational access policies.

Availability, backup and resilience

Enterprise Server supports mirror servers and automated backups. Backup and resilience features are described as facilitating rapid recovery and high availability for centrally managed secrets. Certificate management for client-server TLS is assisted by an integrated wizard in the server administration tools.

Usability and client features

Clients offer features intended to reduce friction for end users, such as automatic filling of login credentials, quick search, folder-based organization and custom fields. The iOS app includes automatic backup, automatic locking, automatic clipboard clearing and UI options that mirror functionality in desktop clients. The vendor provides video tutorials, documentation and onboarding webinars aimed at administrators.

Distribution model and limitations for personal use

The desktop software can be evaluated with a 30-day full-feature trial of the Enterprise Server. After the trial, the product can be continued in a free mode with restricted functionality: the freeware limits include a maximum of 20 passwords, a single password file and reduced editing capabilities when the limit is exceeded. Installers and checksums for various client builds are published on the download pages.

Practical applications

1. Centralizing credentials for IT operations, including administrative accounts, service credentials and SSH/TLS keys under role-based controls.
2. Providing a managed vault for finance and accounting teams to share online banking logins, corporate card details and tax certificates with traceable access.
3. Supporting development and DevOps by integrating API keys and deployment secrets into CI/CD and automation pipelines through a REST API.
4. Enabling executive teams to store confidential documents and strategic access credentials with entry-level sharing and audit controls.