Zoho Vault - Release Notes

We are thrilled to announce the highly anticipated arrival of Zoho Vault for macOS. This dedicated application brings the power and security of Zoho Vault directly to your desktop, allowing you to manage passwords, cards, certificates, and other sensitive information with unparalleled ease and efficiency.

Zoho Vault now extends its services to datacenters in both Canada and Saudi Arabia. This advancement allows our customers to securely store and manage their passwords, cards, certificates, and other sensitive information within their respective countries, ensuring enhanced security and convenience.

• Language options: Users can now select the language of their choice by navigating to Settings >> General Settings. Right now, the available language options are English and Chinese. We are planning to support more languages in the coming months.  

• Option to search in the All Secrets page filter.
• Option to disable the access control configuration in bulk. 

• Security alerts: Administrators will now receive alerts via email when a user is trying to access vault from restricted IP addresses.  Admins will also be alerted after a user has had five unsuccessful passphrase attempts. 
• Audit Activity: Actions performed on audit and report tabs such as view and export are now captured along with the IP address and timestamp. 
• Option to configure the number of days until which the user data should be retained after user deletion.
• Option to export audits and reports with password protection.
• Option to enable privacy settings for personal data.
• User actions in audit trails are now captured along with details on user agents.

• Zoho Vault now supports ready-made templates for more than one hundred websites, and new templates are being added every week. This option will help users to quickly add passwords for commonly used websites.

• Bulk configuration for SSO apps - You can now configure single sign-on for multiple apps in bulk using the More Actions button.
• JIT provisioning in SAML SSO: New user accounts will be automatically created during the login using SAML SSO in Zoho Vault if the account for the user does not exist. The admin has to enable Just In Time (JIT) provisioning in SAML SSO configuration.
• Introducing support for attributes in the SAML Response when configuring the SSO Apps.
• Option to disable file expiration alerts and email notifications in the fine-grained control panel. 
• Option to edit the organization display name on the subscription page.
• Earlier, the search option in the Azure AD Integration page fetched users only from the current page. Now, the search will fetch users from the whole Azure AD users list.  
• Earlier, there was an issue with domain validation using CNAME method. This has been fixed.

• Export Secrets - Provision to export secrets from the offline access file and scheduled backup email in general CSV (or) Zoho Vault format CSV.
• The hierarchical tree structure is now also maintained in shared sub-chambers.
• Earlier, there were some issues while checking consecutive characters in the password assessment report. This has been fixed.
• Earlier, the password assessment report was generated before the complete loading of the dictionary word checker script. This has been fixed. 

• SAML-based Single Sign-on for Cloud Apps - With SAML-based SSO, Zoho Vault will now also provide highly secure, federated access to cloud applications, without users having to enter their credentials, skipping the login screen altogether. The authentication will take place in the background automatically. 
• Option to add multiple URLs in the browser extensions. 

• Password Assessment Report - This report analyzes the strength of passwords and provide assessment details to users. All passwords - enterprise and personal types - owned by users are assessed based on various pre-defined criteria. Passwords found to be scoring low on assessment are labeled as 'weak' and users can replace them with strong, unique passwords thereby improving security.
• Password Security Analysis Report - A collective information about the overall strength of enterprise passwords for administrators in the form of highly intuitive and actionable security analysis report. Admins can get a clear picture of the number of weak passwords in the organization, the number of weak passwords used by each user, average password strength and also alert users to change weak passwords.
• Sub-chamber - Option to add sub-groups to each chamber.
• Option to configure passwords that will never expire in the password policy.
• Option to copy custom secrets fields to the clipboard.
• Option to import shared chambers.
• Option to import secrets from PasswordWallet, Roboform.
• Option to selectively exclude owned and shared secrets while exporting secrets.
• Option to transfer the ownership of chambers when acquiring secrets from a user.
• Earlier, IP restriction can be configured only from the web interface. Now, users can configure it from their mobile apps.
• Earlier, there were some issues in the Azure AD user import. This has been fixed.
• Earlier, there were some issues in the Admin page when changing the user roles. This has been fixed. 
• Earlier, sharing with outsiders option can be performed only by the password owners. Now, users with 'Manage' permission can also share secrets with outsiders. 

• Forgot Your Passphrase - Users can now reset their passphrase themselves using this option. Earlier, they should raise a request to admin to reset their passphrase.
• Earlier, there were some issues in the Azure AD integration. This has been fixed.

• Secret History - Option to capture the history of changes made to username, password, and other fields. The last five changes will be recorded. 
• Change Password - Option to automatically change passwords for secrets in a single click, thus relieving users from the hefty task of manually resetting them from their respective accounts. 
• Minor bug fixes have been fixed.

• Beta version of the Safari add-on released.
   

• Earlier, there were some issues in the secret name search option. This has been fixed.
• Option to restrict adding and sharing secrets.
• Enhancements to the Sticky password import operation.
• Option to search and list secrets name in a consecutive order.
• Option to filter and display only the shared secrets in the All Secrets page.

• Emergency Access: Option to keep the Super Admin or any user as an emergency contact for emergency access to enterprise secrets.
• Azure AD Integration: Option to import users from Microsoft Azure AD and login to Zoho Vault in a single-click using the power of SAML 2.0 protocol. 
• Option to upload files from cloud storage services like Zoho docs, GDrive, Dropbox,  etc.
• Earlier, there were some issues in secret duplication while attaching files. This has been fixed.

• Expiration Alerts: Option to receive alerts and email notifications on secrets expiry. 
   

• Option to import secrets from Intel Truekey JSON.
• Option to edit secret classification in bulk.
• Earlier, there were some issues in the "http" prefix. These have been fixed.
• Earlier, there were issues due to which backup emails were not sent to users as configured. These have been fixed.

• Option to view and manage chambers associated with each secret.
• Option to acquire secrets and transfer its ownership to another user.
• Option to hide secret types globally.
• Option to upload and download SAML metadata in the Active Directory integration.
• Earlier, there were some issues while taking the offline backup file. These have been fixed.
• Earlier, there were some issues while uploading metadata in Safari and Chrome browsers. These have been fixed.

• Sharing with Outsider: Option to share sensitive passwords temporarily with external users (contractors, third-party consultants, etc), whom do not hold a Zoho account. You can share secrets with outsiders by sending them a timed link to the secrets via email that will automatically expire after 30 minutes.
   

• Earlier, there were some issues while importing the backup HTML file. These have been fixed.
• Earlier, there were some URL issues in the ZeptoMail. These have been fixed. 
• Earlier, there were some issues while importing secrets from LastPass. These have been fixed. 
• Earlier, there were some issues while updating secrets. These have been fixed. 
• Option to import the group name while importing secrets from LastPass.

• Earlier, there were some duplication issues while adding secrets from the native mobile apps. These have been fixed.
• Earlier, there were some issues in the access control mechanism. These have been fixed.
• Earlier, there were some issues in the policy enforcement for non-mandatory secrets. These have been fixed.
• Mobile apps link added to the user dashboard.

• Option to import secrets from Mitro.
   

• Option to enter login credential using a virtual keyboard during the login process.
• Option to delete users and sharing keys from the admin console.
• Earlier, there were some issues while sharing a secret with a user group. These have been fixed.

• Earlier, there were some issues while importing URL during the secret import process. These have been fixed.   
• Earlier, there were some alignment issues while navigating the All Secrets page. These have been fixed.
• Earlier, there were some issues while editing secrets. These have been fixed.

• IP Restriction: Option to access Zoho Vault only from a specific IP address range. This can be done by either white-listing or black-listing specific IPs or an IP range from which users access Zoho Vault. Additionally, admins can exempt specific users from these restrictions as needed.
• Option to import secrets from Passpack.
• Earlier, there were some issues in secrets and URL loading in the All Secrets page. These have been fixed.
• Option to search secrets using Tags.
• Earlier, there were some issues while importing secrets and tags from a standard CSV file. These have been fixed.
• Earlier, there were some issues related to IP Restriction. These have been fixed.

• An advanced search option is now provided in the audit section.
• Audits can be now exported as PDF.
• User groups will now only list the users who are part of that group. Deleted users will not be displayed in the list anymore.
• The maximum secret file storage limit is now extended up to 1 MB.
• Option to search users with their email address in the user management tab.

• Chamber Access Report: A report to get a clear picture on the chambers created/used by all users in the organization.

• Chamber loading process optimized.
• Option to modify chambers (add and remove secrets) is now supported. 
• Native mobile apps can now be used by free users. 

• Browser Extensions: Seamlessly auto-login to websites and applications, access existing passwords, and new secrets all from Zoho Vault's extensions for Chrome and Firefox browsers, without leaving your current  browser tab.
• Earlier, there were some issues in GApps user import. These have been fixed.

• Option to import passwords from other password managers like LastPass, Passpack.
• Custom Secret Type: Option to add new or edit existing secret type based on specific requirements.
• GApps Integration: 
  • Provision for importing users and user groups from GApps
  • Provision for importing secrets from a text/CSV file in Google Drive
  • Provision for exporting offline encrypted copy of secrets to Google Drive

• Option to delete the organization in the Admin tab.
• Option to add a new user or modify the role of an existing user as Super Admin in the User Management tab. 

• Earlier, the click-to-login configuration status and user search did not work properly. This has been fixed.
• Earlier, there were some issues in exporting secrets. These have been fixed.
• Provision to add notes while exporting secrets.
• Notifications to admin about pending secret approval requests.
• Option to enable and disable auto submit provided under More Actions.

• Users can now attach secure files to secrets.
• While importing secrets, users can now choose whether the secrets are to be added as or Enterprise secrets.
• Organization administrators can now view the details such as organization creation time, the number of secrets stored, the number of users, etc. in the Organization Details page.
• Acquire secrets settings option is now removed from the Admin page.  

• Two-Factor Authentication: Admins can now enforce TFA at org level and also update/reset user TFA status anytime.

• Acquire Secrets: Provision for Super Administrators to forcefully acquire all 'Enterprise' level secrets owned by any user irrespective of their roles (personal secrets cannot be acquired). 
• Fine-Grained Access Controls: Administrators can now allow/restrict certain features organization-wide and selectively exempt users when needed. 
  • Option to restrict / allow adding Personal secrets 
  • Option to restrict / allow export of secrets 
  • Option to restrict / allow downloading HTML for offline access 
  • Option to restrict / allow mobile access 

They can modify these controls any time.

• Provision for sharing chambers to users and user groups.
• Users can now view the secrets they share by clicking  Shared by Me and share to them by clicking the Shared to Me icon in the All Secrets page. 
• Option to reset sharing for all secrets.
• Option to enable/disable restrictive Admin tasks from the Admin tab.

• Earlier, there were some issues while recording IP addresses in the audit. These have been fixed.
• Option to restrict users from storing notes during secret addition.
• Earlier, while scrolling down the Add/Edit, popup was not visible properly. This has been fixed.
• Usernames are now sorted in alphabetical order while sharing secrets.

• Floating menu is now provided in Secrets, Chambers, and Auto Login pages for easy navigation.
• Users can now edit their already existing other Zoho application's organization with a new one during account set-up.

• Users can now add secure notes while adding secrets. 

• Option to export all secrets in plain-text to text file which can be stored on users devices. The entries will be printed in comma separated form in a text field. 
• Forgot Passphrase: Option to reset the passphrase is given to users to start all over afresh.
• One-click Login: Option to share secrets without revealing them in plain-text. Users will be only permitted to do auto login.

• Generation of wrong/invalid RSA keys is prohibited by asking the user to regenerate the key pair.
• Option to schedule payments is provided to users.
• Earlier, some users who were using Zoho Vault for personal use faced a blank screen randomly. This has been fixed.

• Option to search users is provided on Add Users page. 
• Option to search secrets is provided on Secrets page.
• The bookmarklet will be regenerated whenever the passphrase is changed.
• Earlier, there were some issues in mapping secrets in Zoho Vault database. This has been fixed.
• Option to navigate audit logs based on the number of audit rows.