Skip to main content

Credentials

The Credentials module provides a secure vault for storing and managing passwords, API keys, and other authentication credentials for your clients.

Credentials List

Overview​

Securely manage:

  • Website logins
  • Application passwords
  • API keys and tokens
  • SSH keys
  • Service account credentials
  • Admin passwords

Security​

Credentials in Ascent are:

  • Encrypted at rest - AES-256 encryption
  • Access controlled - Role-based access
  • Audit logged - All access is recorded
  • Securely transmitted - TLS encryption

Viewing Credentials​

Navigate to Assets → Credentials to see stored credentials.

Credential List​

The list shows:

  • Credential name
  • Client
  • Username
  • URL
  • Associated assets

Note: Passwords are never shown in the list view.

Adding a Credential​

  1. Click + Add Credential
  2. Enter credential details:
    • Name - Descriptive name (e.g., "Client Portal Admin")
    • Client - Owner of the credential
    • Type - Password, API Key, SSH Key, etc.
    • Username - Login username
    • Password - The secret (encrypted)
    • URL - Where this credential is used
  3. Optional information:
    • Associated asset
    • Notes
    • Expiration date
  4. Click Save

Credential Types​

TypeDescription
PasswordStandard username/password
API KeyAPI authentication token
SSH KeySSH public/private key pair
CertificateClient certificate
TokenOAuth or bearer token
OtherMisc. credentials

Viewing Credentials Securely​

To view a stored password:

  1. Open the credential detail page
  2. Click Reveal Password
  3. Password is shown temporarily
  4. Click to copy to clipboard
  5. Password auto-hides after a few seconds

All credential views are logged.

Credential Detail Page​

Information​

  • Name and type
  • Client association
  • Username and URL

Password/Secret​

  • Click to reveal (with logging)
  • Copy to clipboard
  • Change password

Usage​

  • Associated assets
  • Who has accessed

Audit Log​

  • All access events
  • Changes made

Password Generation​

Generate secure passwords:

  1. Click Generate Password
  2. Configure options:
    • Length (12-64 characters)
    • Include uppercase
    • Include numbers
    • Include symbols
  3. Use the generated password

Linking to Assets​

Associate credentials with assets:

  • Server admin passwords
  • Device login credentials
  • Application accounts

When viewing an asset, you can see its linked credentials.

Access Control​

Control who can view credentials:

  • Full Access - Can view and edit
  • Limited Access - Can view only
  • No Access - Cannot see at all

Configure per-role or per-user.

Audit Trail​

All credential activity is logged:

  • Who viewed the credential
  • When it was viewed
  • Changes made
  • From what IP address

Best Practices​

  1. Use strong passwords - Use the generator
  2. Rotate regularly - Update passwords periodically
  3. Limit access - Only grant access when needed
  4. Review audit logs - Monitor for unauthorized access
  5. Document purpose - Clear names and notes
  6. Link to assets - Know what uses each credential
  7. Enable 2FA - Where possible, use MFA