Devolutions Password Manager is a credential vault from Devolutions, deployed either through the hosted Devolutions Cloud or the self-hosted Devolutions Server, with an optional privileged access management (PAM) module. It is sold in bundled per-user packages starting at $3 per user per month billed annually, rather than priced as a standalone product.
Listing updated . Checked by MSP Software .
Devolutions Password Manager is a credential vault from Devolutions, the Quebec-based vendor also known for Remote Desktop Manager, aimed at IT teams and small to mid-sized businesses that want a shared vault with governance controls rather than a purely personal password manager. It covers credential storage and sharing, autofill, a built-in one-time password authenticator, Group Policy Object enforcement, permission-based access control, and browser, desktop and mobile clients for Windows, macOS, Linux, iOS and Android. A privileged access management module, Devolutions PAM, sits on top of the same platform and adds just-in-time access elevation, scheduled password rotation, session recording, and account discovery with risk scoring across Active Directory, Entra ID, SSH, SQL Server and Windows systems.
The vault itself is not sold as a standalone product with its own price. Devolutions bundles it into per-user packages billed annually: the entry package, Workforce Password Management, is $3 per user per month and includes Devolutions Password Manager plus a choice of backend, either the hosted Devolutions Cloud (SOC 2 Type II and ISO 27001 certified) or the self-hosted Devolutions Server. Higher packages add remote access tooling at $20 per user per month, Remote Desktop Manager and IT operations tooling at $30 per user per month, and full PAM at $50 per user per month, all billed annually (checked September 2026). Teams of five or fewer can instead take a Starter Pack covering the whole suite at $25 per user per month. A genuinely free, single-user edition of Password Manager exists for individual use, and Devolutions has not published a fixed-length free trial of the paid team packages.
Devolutions documents integrations with directory services including Active Directory, Microsoft Entra ID and Google Workspace, secrets stores such as HashiCorp Vault and Azure Key Vault, IT Glue, N-able Passportal, and import paths from rival vaults including 1Password, Bitwarden, LastPass and Keeper. Devolutions was founded in 2010 and is headquartered in Lavaltrie, Quebec, Canada. Anyone comparing it against a purpose-built MSP password manager should confirm on a trial whether it offers dedicated multi-tenant client segregation, since the vendor does not document that as a feature, and should check which package tier actually includes the PAM module before comparing the headline $3 price against a competitor's per-technician rate.
Devolutions Password Manager suits an IT team or MSP that already uses, or is considering, Devolutions Remote Desktop Manager and wants credentials, remote connections and privileged access handled by one vendor rather than stitched together from separate tools. The headline $3 per user per month price only buys the vault and a backend choice of Devolutions Cloud or Devolutions Server; PAM is a separate, much higher package tier at $50 per user per month, so price it out against your actual requirement rather than the entry figure. An MSP wanting a purpose-built multi-tenant vault with per-client segregation, such as N-able Passportal or Keeper, should check for that specifically on a demo, since Devolutions does not document a dedicated multi-tenant console. Confirm which directory, PSA or RMM integrations you actually need are on the current integration center list before switching.
| Feature | Supported | Note |
|---|---|---|
| Shared team vaults | yes | Shared vaults with permission-based access control across Devolutions Cloud or Devolutions Server. |
| Role-based access control | yes | Permission-based access control for view, add, edit and delete actions. |
| Breach monitoring | unknown | Not documented on the vendor's product or feature pages. |
| Password health reports | unknown | Not documented on the vendor's product or feature pages. |
| SSO integration | yes | SSO support alongside Active Directory and Entra ID directory sync. |
| FIDO2 and hardware key support | unknown | No FIDO2, WebAuthn or hardware key support documented. |
| Secrets management | yes | Integrates with HashiCorp Vault and Azure Key Vault; PAM adds credential and secrets rotation. |
| Browser extension | yes | Browser extension for Chrome, Firefox, Edge, Opera and Safari. |
| Mobile app | yes | iOS and Android apps. |
| Event logging and audit trail | yes | Audit logs and, in PAM, session recording tied to each credential checkout. |
| Emergency access | unknown | Not documented on the vendor's product or feature pages. |
| Multi-tenant MSP console | unknown | Not documented as a feature; vendor content makes no mention of per-client tenant segregation. |
| Feature | Supported | Note |
|---|---|---|
| Multi-factor authentication | yes | MFA enforcement for vault access; PAM requires step-up authentication before releasing a credential. |
| Single sign-on | yes | SSO support documented for governance and centralized access. |
| Conditional access and device trust | unknown | Not documented on the vendor's product or feature pages. |
| Privileged access management | yes | Devolutions PAM module: just-in-time elevation, password rotation, session monitoring, account discovery and risk scoring. |
| Passwordless and passkey support | unknown | Not documented on the vendor's product or feature pages. |
| Directory sync | yes | Account discovery and sync across Active Directory, Microsoft Entra ID and Google Workspace. |
| Session and risk monitoring | yes | PAM assigns 1-10 risk scores to discovered privileged accounts and records privileged sessions. |
| Legacy VPN and app support | unknown | Not documented on the vendor's product or feature pages. |
| Self-service password reset | unknown | Not documented on the vendor's product or feature pages. |
| Breach monitoring | unknown | Not documented on the vendor's product or feature pages. |
| RADIUS and SAML support | unknown | Not documented on the vendor's product or feature pages. |
| Admin audit log | yes | Audit logs for governance and PAM session/checkout auditing. |
Devolutions Password Manager is the vault that used to be marketed under other Devolutions branding; as of September 2026 devolutions.net sells it only under the name Devolutions Password Manager, with no product currently called Devolutions Password Hub or Devolutions Hub. It runs on either Devolutions Cloud, a hosted backend, or Devolutions Server, a self-hosted backend, chosen when you set up the workspace rather than by buying a different product.
Devolutions Password Manager is sold per user per month, billed annually, not as a standalone price on its own. The entry package, Workforce Password Management, is $3 per user per month and includes the vault plus Devolutions Cloud or Devolutions Server; a package that also adds the Devolutions PAM privileged access module costs $50 per user per month (checked September 2026).
Not by default. Devolutions PAM is a separate module built on the same Password Manager and Server or Cloud stack, adding just-in-time access elevation, scheduled password rotation, session recording and risk-scored account discovery. It is only included in Devolutions' top pricing package, at $50 per user per month billed annually, so check which package tier you are quoted before assuming PAM is included.
Yes. Devolutions Password Manager can run against Devolutions Server, a self-hosted backend for on-premises or private cloud deployment, as an alternative to the hosted Devolutions Cloud option. Both options are billed within the same per-user packages rather than as separate products.
Yes, Devolutions publishes a genuinely free, single-user edition of Password Manager alongside a free single-user edition of Remote Desktop Manager, with a choice of free Cloud or Server workspace. Moving to team features such as shared vaults requires upgrading to one of Devolutions' paid per-user packages.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review