Client Vault Access
Amanda Aparicio
We need more security around the client vault, including limiting per client (not user type) which individual users have access. I would also ask that an additional 2FA code be generated before being able to view the password and other information stored to further secure this very sensitive data.
Log In
M
Michelle Carlson
Yes, this needs to be implemented as soon as possible. Two-factor authentication (2FA) before viewing a password and limiting access to only essential client logins are critical internal controls for protecting sensitive client information and maintaining appropriate access permissions.
R
Rhonda Hopkins
Yes 100% to a 2FA to be generated before being able to view the password!!
Amanda Aparicio
Merged in a post:
Vault - per user restriction
Amanda Aparicio
When entering an encrypted record in the Client Vault, I'd like to be able to make them private to just the user entering them OR available to everyone.Right now, all passwords are available to everyone with access to that client. Some passwords this is necessary and so they can go in the vault. But some passwords are unique to each user and I'd like to be able to enter those in the Vault as well.
K
Katie Carter
I currently do not have clients accessing FC, but all of my staff do not need access to the vault. I would love to have some control over who has access
J
Jennifer Klein
I 100% agree with you and am surprised that this is not something that I would think would be taken lightly? It would be really nice to have the password masked , but with a copy feature so they can log in but not see the actual password. We cannot be the only 2 people that think this is a security issue :) Not sure why a employees would need to actually see the password at all, unless they were a manager but then you could grant them access.
L
Lisa Tong
with restrictions to prevent accidental edit/delete