B.01
Your staff use a unique, strong password for every account and never have to remember one
Enterprise password management
A password vault for your staff and teams (Vaultwarden, compatible with Bitwarden). We run it ourselves in Berlin. Staff sign in via Zitadel, and apps are available for browsers and smartphones.
01
Your Benefits
B.02
Shared credentials (server logins, API keys, licence keys) are kept in the team vault rather than in Excel lists
B.03
When someone leaves, you deactivate their Bitwarden account and all their access is blocked at once
B.04
Self-hosted in Germany, so no data sits with US cloud providers and you are not tied to any cloud vendor
02
Service scope
L.01
Bitwarden server (Vaultwarden) in the Netsource private cloud, a dedicated instance per customer
L.02
Browser extensions for Chrome, Firefox, Safari, Edge
L.03
Mobile apps for iOS and Android
L.04
Desktop apps for Windows, macOS, Linux
L.05
Team vaults with role-based permissions
L.06
SSO sign-in via Zitadel with mandatory MFA
L.07
Emergency access for management
L.08
Audit log available for 90 days
L.09
Daily backup to PBS, with a restore test every six months
03
Requirements and exclusions
→ Prerequisites
- Zitadel identity integration (NDS-ID-ZITADEL) for SSO and MFA
- We recommend an introductory training session for your staff (staff training)
- A maintenance contract, if you need a guaranteed response time
✗ Not included
- privacyIDEA/FIDO2 hardware keys are covered by NDS-ID-MFA, not by this building block
- Moving from LastPass, 1Password or other cloud services is handled as a project. Import is supported and we quote the effort in advance (NDS-PRJ-MIG)
- SSH keys for admin access need a solution of their own (HashiCorp Vault or similar), on request
- S/MIME certificates are managed under NDS-SEC-MAIL
04
Related Services
NDS-ID-ZITADEL
Zitadel identity provider
One account for all your applications. We run Zitadel as an identity provider ourselves, based on the OIDC standard and with MFA mandatory from the start.
NDS-ID-MFA
MFA rollout and maintenance
Every member of staff signs in with a second factor (multi-factor authentication, MFA) using a TOTP app, a FIDO2 security key or a passkey. Zitadel enforces this centrally.
NDS-PRJ-SCHUL
Staff training
We train your staff on Microsoft 365, Nextcloud, IT security and new software, on site or by video, with exercises and handouts to take away.
Does this fit your business?
In 30 minutes we work out whether this service suits you. Free and without obligation.