BeyondTrust Password Safe Reviews

Name: BeyondTrust Password Safe
Brand: BeyondTrust
Rating: 4.0 (26 reviews)

4.0 out of 5

26 reviews
84% willing to recommend

What is BeyondTrust Password Safe?

Beyond Trust Password Safe is an automated solution that combines password and privileged session management into a single platform. Password Safe delivers secure access control, auditing, alerting, recording, and monitoring.

Get the BeyondTrust Password Safe Buyer's Guide and find out what your peers are saying about BeyondTrust Password Safe, CyberArk Privileged Access Manager, Azure Key Vault and more!

BeyondTrust Password Safe is the #7 ranked solution in top Enterprise Password Managers and #9 ranked solution in top Privileged Access Management (PAM) solutions. PeerSpot users give BeyondTrust Password Safe an average rating of 8.0 out of 10. BeyondTrust Password Safe is most commonly compared to CyberArk Privileged Access Manager: BeyondTrust Password Safe vs CyberArk Privileged Access Manager. BeyondTrust Password Safe is popular among the large enterprise segment, accounting for 72% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 16% of all views.

Buyer's Guide

BeyondTrust Password Safe

April 2025

Get the report

Helped 865,295 peers since 2012

Featured BeyondTrust Password Safe reviews

Ali Hatamleh

IT operations manager at a tech services company with 11-50 employees

The features I find valuable in Password Safe include password retention and management, session privilege monitoring, live monitoring and recording, and the use of PS automation scripts for creating connections. The smart tooling and smart group features are also important as, after finalizing discovery, they auto-collect accounts in the environment and organize them in Smart Groups for easy access.

Read full review

Gary Jolley

PAM Architect at GCA

It starts with discovery. Its number one feature is discovery. The discovery engine in BeyondTrust is off the charts. When they perform a discovery, you know everything there is about a server, including what software is installed. For example, if you want to group all of your database servers together, you can do that by using discovery and Smart Rules. If a server has Microsoft SQL installed, it gets put into a group based on a Smart Rule. It makes it very easy to determine what is what in your environment. As organizations grow or acquire other companies and merge, they lose track of what they have. BeyondTrust can help you throw a rope around it very rapidly. Its user interface is really nice. It is very visual. When you first log in, based on your job role, you see what you have access to when you look at the screen. As an administrator, I see the configuration screen where I can go in and modify Active Directory and authentication connections. I can set up SAML, or I also have access to create Smart Rules. The access is based on the role that you have when you log in. I have six boxes or six categories of administration items, whereas when an admin user connects, he would only have one or two. So, based on your role, you see what you have access to. It is not like you click something and then it fails because you're not an administrator at that level. You actually see what you have access to, and BeyondTrust is very good at that. BeyondTrust provides the ability to connect by using not just the web interface but also the admin tools such as MobaXterm, PuTTY, or a lengthy list of other types of tools. You can use the connection string and connect through BeyondTrust, and it will be session recorded, keystroke logged, and highly available. When you bring up MobaXterm, you probably bring up one of the most complex ones because MobaXterm has the ability to have two, three, or four concurrent connections, which makes BeyondTrust Password Safe ideal. It is very easy to integrate session management into existing business processes. To make it easy for the engineers, we created templates of the connection strings and then used, believe it or not, Microsoft Excel to create custom strings for each of the engineers. We exported them to a text file that they could then import. In the case of PuTTY, because PuTTY stores the connections and the credentials in the registry, we had to do something different there, but the connection string is customizable enough to make the job fast and easily repeatable for all the other engineers. You don't have 20 or 30 engineers spending two or three days creating all these connection strings. I can create them in a matter of minutes with a Microsoft Excel spreadsheet and then save them to a text file or a CSV file. It is awesome. We are able to integrate session management without disrupting business processes. One of the niceties about BeyondTrust is the ability to integrate it with ticketing systems. For example, as per Sarbanes-Oxley, we have to have a reason for why an administrator is performing something. The integration with a ticketing system is ideal rather than manually typing the reason in the reason field through the GUI where most engineers, after a while, end up just typing in Work. They don't put in enough data to make it clearly visible why they connected. The integration with the ticketing system is ideal for that. Ticket-driven access makes the work very quantifiable.

Read full review

Vinay Dabas

Senior Sales Engineer at ForgeRock

The database instance onboarding should be simplified. The problem is that you can scan the assets and databases inside a server, but you cannot onboard them or manage them with the smart tools. It has to be done manually. I think they should try to include more custom platforms. With the databases, there were some issues. The databases are inside the servers, and it was a bit difficult to scan the databases. Apart from that, the rest of the assets were easy to scan and integrate. It's difficult to onboard the database. You can scan and find them, but you have to onboard the databases manually. You cannot onboard databases using Smart Rules databases. Database instances are difficult to onboard and must be done manually. The applications should be more like in the SDK. They have good API support now.

Read full review

BeyondTrust Password Safe mindshare

Product category:

As of August 2025, the mindshare of BeyondTrust Password Safe in the Enterprise Password Managers category stands at 3.5%, up from 3.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Enterprise Password Managers

PeerResearch reports based on BeyondTrust Password Safe reviews

Type	Title	Date
Category	Enterprise Password Managers	Aug 19, 2025	Download
Product	Reviews, tips, and advice from real users	Aug 19, 2025	Download
Comparison	BeyondTrust Password Safe vs Azure Key Vault	Aug 19, 2025	Download
Comparison	BeyondTrust Password Safe vs CyberArk Privileged Access Manager	Aug 19, 2025	Download
Comparison	BeyondTrust Password Safe vs AWS Secrets Manager	Aug 19, 2025	Download

Title	Rating	Mindshare	Recommending
CyberArk Privileged Access Manager	4.3	8.0%	95%	225 interviews Add to research
Azure Key Vault	4.3	19.1%	98%	50 interviews Add to research

Valuable Features

BeyondTrust Password Safe offers session recording, password rotation, and vaulting. Enterprises benefit from its intuitive user interface, Smart Rules for automatic onboarding, and robust analytics. The platform excels in asset visibility, password management, session monitoring, and security integration. Features like discovery, cross-platform integration, and advanced auditing enhance compliance and business process efficiency. Organizations appreciate its architecture capabilities and flexibility, enhancing scalability and security management.

"The time-saving benefits come from no longer having to remember multiple device passwords."
"I rate BeyondTrust Password Safe as an overall 10 out of 10."
"I find that BeyondTrust Password Safe is a very effective application for password management."

Room for Improvement

BeyondTrust Password Safe requires enhancements in documentation, database integration, and session error notifications. The user interface could be more intuitive with simplified management consoles. RDP access and session recording features need refining. Capacity limitations for Smart Rules cause complexities. Additionally, improvements in application integration, API support, patch compatibility, and analytics are necessary. Addressing issues like the need for incremental backups and enhancing SAP product integration would benefit users significantly. Pricing considerations also warrant attention.

"The effectiveness of BeyondTrust Password Safe's session management capabilities for SSH and RDP is pretty much robust, but it needs more improvement for other applications and web-based applications."
"From the client perspective, they usually complain that the RDP session disconnects without error notifications."
"If they can create a single platform to create a connector, it would be better than using the RBS server."

ROI

Customers experience varied returns on investment from BeyondTrust Password Safe. Many acknowledge its necessity for compliance with governance, risk, and compliance standards despite its cost. While some express immediate benefits in enhanced security and privilege management, others note value primarily in audit improvements. Automation and ease of implementation are highlighted as advantages. Success metrics are influenced by organization-specific timelines, with many citing a fast realization of benefits related to security enhancements and compliance achievements.

Pricing

Enterprise buyers evaluating BeyondTrust Password Safe will find a subscription-based pricing model significantly more affordable than competitors like CyberArk. Pricing focuses on assets rather than users, which can lead to cost-effectiveness depending on the number of managed assets. This model allows scalability and is beneficial for organizations that wish to assess their environment before committing to full management. Despite being described as expensive, the Total Cost of Ownership is justified given the comprehensive features offered.

"I would rate the pricing a seven out of ten, where one is cheap and ten is expensive."
"The product is quite affordable."
"The pricing structure is better than the competitors. It's much cheaper than CyberArk. They do the licensing on the basis of assets, not on the number of users. For CyberArk, they base the licensing on the number of users, and they have an expensive model of pricing. BeyondTrust has a cheaper model."

Popular Use Cases

Organizations use BeyondTrust Password Safe primarily for protecting privileged accounts, managing passwords securely, and adhering to compliance requirements. It facilitates automatic password rotation, session recording, and monitoring for auditing purposes. Enterprises benefit from its ability to integrate with existing infrastructure, offer secure access without needing to reveal passwords, and enforce least privilege principles. This tool is favored for its capability to manage access across a range of applications and systems, thereby enhancing security posture.

Service and Support

BeyondTrust Password Safe's customer service and support are generally praised for their responsiveness and expertise, often receiving high ratings. Users appreciate the quick response from technical support teams globally, noting the seamless availability during urgent situations. While documentation needs improvement, support staff is usually helpful. Users commend the promptness in addressing tickets, although some note delays in certain cases. The expansion of support teams to various regions has enhanced service reach and efficiency.

Deployment

Many describe BeyondTrust Password Safe's initial setup as straightforward if network architecture is understood. Documentation is beneficial, but migrating users from traditional methods can be challenging. Complexities arise with governance and infrastructure prerequisites. Deploying as a virtual machine is easier. Installations benefit from structured documentation and require minimal application configuration. Larger setups need additional resources. Some organizations find setup easy but complex due to environmental specifics and policy requirements.

Scalability

BeyondTrust Password Safe exhibits strong scalability with built-in options for expansion through external databases, active-active appliances, and support for large user bases. Users highlight its adaptability with the capability to scale by increasing resources like CPU and RAM. While some view Windows-based infrastructure as a limitation, others report successful scaling across various environments. The solution rates between seven and nine out of ten, depending on individual requirements and configurations.

Stability

BeyondTrust Password Safe exhibits strong stability with positive experiences reported. Many users praise its robustness, rating it high on reliability. Some encountered minor issues during initial setups or updates, while routine maintenance seems necessary. Those having Active/Active configurations see consistent performance, whereas Active/Passive setups might vary. Although early versions were unstable, improvements were noted. The stability generally improved from version 21 onward, making it comparable to competitors.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our BeyondTrust Password Safe Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

13%

Manufacturing Company

Government

Healthcare Company

Construction Company

University

Energy/Utilities Company

Media Company

Insurance Company

Retailer

Comms Service Provider

Educational Organization

Legal Firm

Recreational Facilities/Services Company

Performing Arts

Hospitality Company

Wholesaler/Distributor

Transportation Company

Pharma/Biotech Company

Real Estate/Law Firm

Outsourcing Company

Non Profit

Photography Company

Consumer Goods Company

Logistics Company

Engineering Company

Mining And Metals Company

Marketing Services Firm

Renewables & Environment Company

Compare BeyondTrust Password Safe with alternative products

Learn more about BeyondTrust Password Safe

This free and open-source password manager supports Windows and Linux, and some ports are available for other platforms as well. Their proprietary algorithm, Twofish, is considered highly secure, with the advantage that it is not affiliated with NIST. The Twofish algorithm secures the data while keys are delivered using SHA-256 authentication.

The application is easy to use, and you can download the Windows app from several sites. Additionally, the application is available in 14 languages.

Beyond Trust Password Safe Key Features

Continuous automated account discovery: Scan, identify and profile assets with the discovery engine. The solution has dynamic categorization that enables the automated onboarding of assets into groups.
Application-to-application password management: Password Safe offers an adaptable API interface including an unlimited number of password caches, therefore providing scalability and redundancy.
Secure SSH key management: The system automatically rotates SSH keys to enforce granular access control and workflow. Private keys securely log users onto systems without exposing them.
Adaptive access control: Evaluates context and provides access requests by considering factors such as time of access and location to determine the user’s authorization level.
Enhanced privileged session management: Admins can record, lock, and document suspicious behavior without disrupting productivity by managing sessions live.
Advanced privileged threat analytics: Password Safe monitors assets and user behavior every day, analyzing what are normal patterns and detecting deviations.
Multi-factor authentication: Password Safe supports 2FA (two-factor authentication) using Yubikey 4, Nano, or Neo.

What can you do with Password Safe?

Cross-device and cross-platform syncing: You can safely store encrypted password files online, where you can access them via Password Safe-compatible apps.
Drag and drop password: Password Safe has a “Dragbar,” which you can use to complete forms by dragging and dropping icons over the form - for example, passwords, usernames, design tiles, and emails.
Autotype: With Password Safe, when you click on a web page or login box, the autotype feature will try to fill in your credentials automatically for you.
Import and export: You can import passwords from text, XML, or CSV fails. You can also export passwords in text, XML, and the PSAFE format.
Password generator: Generate secure passwords by using the algorithm. You can also define your password rules.

Beyond Trust Password Safe Benefits

Controls third-party access: Password Safe secures the connection and automatically checks privileged credentials. The solution records all sessions.
Uses context to determine access: Password Safe considers risk factors like location, day, or time of access and uses them to adjust the permissions and privileges of each user.
Manages access for privileged and non-privileged accounts: By integrating with SailPoint IdentityIQ, Password Safe effectively manages user access for privileged as well as non-privileged accounts.
Reduces cloud risk: Password Safe simplifies secure storage and session management. It supports major cloud providers such as Azure, Amazon, Google, Rackspace, and GoGrid. It also supports social networks - Facebook, LinkedIn, and Twitter.
Integrates password and privilege management: Integrates with Endpoint Privilege Management to control the resources users can access and the actions they are allowed to take

Reviews from Real Users

A PAM Architect at a tech services company says, "BeyondTrust Password Safe's features that I have found most valuable are really those that are knitted in. That is their Smart Rules and Smart Groups, where you design your administration model so you create your AD groups and your asset groups, and configure Password Safe."

An I.S. Architect at a insurance company mentions that "Session recording, password rotation, and password vaulting are the most valuable features."

"One of the most valuable features is that this is a product designed with enterprises in mind," adds a Cybersecurity Architect at a tech vendor.

BeyondTrust Password Safe was previously known as BeyondTrust PowerBroker Password Safe.