Accompany Users

Duration20 minOfferModule Gestionnaire de mots de passePrerequisitesShare a common password

Objectives

• I can explain the difference between the three vaults
• I can guide a user who imports their passwords from their browser or another manager
• I can show how the extension fills out a form, including by right-clicking
• I know where a user saves a TOTP secret

0 / 4 objectives achieved — check them off as you go through the lesson.

Why It's Useful

A password manager is of no use if it remains empty. On the day of deployment, your colleagues will ask the same questions: “Where are my Chrome passwords?”, “Can everyone see this password?”, “Why isn't the field filling in?”. This lesson takes you through the user journey to be able to answer these questions.

Your Turn

Log in to the portal with a user account from your test organization.

1. Open the password manager and browse its two tabs. Vault first lists the organization's applications, then the user's personal entries. Shares groups what colleagues have shared with them. → Password Manager
2. In the Vault tab, click on Add a password and create an entry for a site not in the catalog.
3. Click on Import, choose Google Chrome, and follow the export instructions. In the preview table, uncheck one row, then click on Import. → Import Passwords
4. Open Password Strength and identify the passwords marked as weak.
5. In the extension, hover over an application, click on the gear icon, then fill in the username, password, and, if the service offers it, the TOTP secret. → Password in the Extension
6. Open the login page for this site: the fields fill in automatically. If a field is not detected, right-click in it and choose the value from the extension menu. → Form Filling

Shares Tab

Passwords that a user shares with a colleague automatically expire after 30 minutes. This is not a sustainable sharing method: for a common account for a team, use the common password from the folder.

info

Importing adds entries to the user's personal vault, not the company's vault. The file exported by the browser contains passwords in plain text: advise deleting it once the import is complete.

Check Your Knowledge

1A user wants to keep the password for a site that is not in the organization's catalog. Where do they store it?

2How long does access to a password shared by a colleague last?

3Where do passwords imported from Chrome go?

4The extension did not detect the password field of a site. What should be advised?

Key Takeaways

• Two tabs: Vault (organization applications, then personal entries out of catalog) and Shares (passwords shared by a colleague, 30 minutes).
• Import covers major managers and browsers, plus a free CSV.
• The extension fills in username, password, and TOTP code, and right-click takes over when a field is not detected.

Next Lesson: Administrator Notes