Zoho Vault - Release Notes

2020

Oct

Features
  • Option to customize and rebrand your Zoho Vault account

Aug

Features
  • Trash to soft-delete passwords

May

Features
  • Drag and drop passwords to folders
  • Filter passwords within a folder
  • Allow users to create a subfolder under a shared folder

Apr

Features
  • Option to enforce a default inactivity timeout
  • Option to enforce the password policy on the master password
  • Option to import passwords from popular browsers (Chrome, Firefox, Opera, Brave, Vivaldi)

Feb

ChangeEnhancement
  • Early release of the new user interface (beta launch)

2019

Oct

Features
  • An option to import users and user groups from Okta
  • In-app purchases on mobile apps

Aug

Bug-FixEnhancement
  • Earlier issues with configuring cloud backup with OneDrive have been fixed
  • Issues with importing users from Azure have been addressed
  • Added new options to import user passwords from

Jul

Bug-FixEnhancement
  • Added new options to import user passwords from and enhancements made for the existing password import options 
  • Issues with G Suite import have been addressed

Jun

Features

Option to periodically back up user data with Zoho Workdrive 

May

Enhancement
  • Enhanced search that now allows users to perform tag search for multiple words using quotes.

Apr

Enhancement
  • Approval of handshake requests from users have been automated. Earlier, an admin had to manually approve the sharing requests of users. Now, all sharing requests from users will be auto approved immediately after an admin logs in to Vault, allowing users to start sharing passwords right away. 
  • Enhanced auto login experience for websites with two-step login process, like Google, Apple, Evernote, and more.

Mar

Enhancement
  • Dashboard has been refreshed with insights about your Secrets, Chambers and Shared Secrets. You can also keep track of your average password strength and weak passwords from here.

Feb

Features
  • Option to integrate with popular helpdesk systems (Zoho Desk, ManageEngine ServiceDesk Plus On-Demand, Jira Desk, ServiceNow, Zendesk) to automatically validate service requests related to password access. The integration ensures that users can access passwords only with a valid ticket ID. Learn more.

  • Option to send periodic backup data of users to a few selected cloud services (Amazon S3, Box, DropBox, Google Drive, OneDrive) for disaster recovery purposes, apart from the default data backup offered via email. Learn more

Jan

Enhancement
  • Enhancements made to the G Suite user import

2018

Dec

Enhancement
  • The one-time mandatory initiate sharing process has been simplified. By default, sharing will be initiated for all users and administrators should only approve the sharing requests of users to allow them to share secrets with other users.  
  • Administrators can switch to any edition of their choice which they are planning to purchase, during the trial period.
  • Administrators will get an alert while deleting a user if they have personal secrets stored in their account. 
  • Earlier, while adding a secret, the maximum file upload limit was only 1 MB. Now, this limit has been increased to 2 MB.
  • Earlier, while adding a secret URL, only "http and https" extensions were supported. Now, users can add "ftp, sftp, tftp, nfs, ssh, telnet, file" extensions as well.
  • Earlier, users cannot rearrange custom fields. This can be done now.
  • Earlier, users can attach only "text, xml, csv, html, png and pdf" file types while adding a secret in our Safari extension. Now, users can attach any file types.

 

Sep

Enhancement
  • Administrators can now view the next data backup time on the Configure Backup Schedule page. 
  • Users can now export secrets from a particular chamber on the Export Secrets page. 
  • Users can now export or download the offline access file along with the secrets shared with them using one-click login permission.
  • Users cannot export secrets shared with them with Access Control enabled.
  • Users can now filter Enterprise secrets that are not part of any chamber. 
  • All administrators will now receive an email notification when secrets of a user were acquired by any administrator.

Aug

Enhancement
  • Option to search a secret with double quotes to find the exact match using a secret name/description/tags on the All Secrets page.
  • Option to view, the chambers with their hierarchical tree structure in the Secrets page filter.
  • Option to copy passphrase is now available for Free Edition (under General Settings) and Paid Edition (under Fine-grained Settings) users. 

Jul

New

New Enhancement

  • Language options: Users can now select the language of their choice by navigating to Settings >> General Settings. Right now, the available language options are English and Chinese. We are planning to support more languages in the coming months.  

Jun

New

New Enhancements

  • Option to search in the All Secrets page filter.
  • Option to disable the access control configuration in bulk. 

May

New

New Features and Enhancements

  • Security alerts: Administrators will now receive alerts via email when a user is trying to access vault from restricted IP addresses.  Admins will also be alerted after a user has had five unsuccessful passphrase attempts. 
  • Audit Activity: Actions performed on audit and report tabs such as view and export are now captured along with the IP address and timestamp. 
  • Option to configure the number of days until which the user data should be retained after user deletion.
  • Option to export audits and reports with password protection.
  • Option to enable privacy settings for personal data.
  • User actions in audit trails are now captured along with details on user agents.

Apr

Enhancement

New Enhancements

  • The Default RelayState parameter in the single sign-on configuration can now also accept URL and Base64 encoded string.
  • Administrators can now configure users' access to the vault, change their roles, and delete users using the options available under the Actions column on the User Management page. 

Feb

New

New Feature

  • Zoho Vault now supports ready-made templates for more than one hundred websites, and new templates are being added every week. This option will help users to quickly add passwords for commonly used websites.

2017

Dec

New

New Features and Enhancements

  • Bulk configuration for SSO apps - You can now configure single sign-on for multiple apps in bulk using the More Actions button.
  • JIT provisioning in SAML SSO: New user accounts will be automatically created during the login using SAML SSO in Zoho Vault if the account for the user does not exist. The admin has to enable Just In Time (JIT) provisioning in SAML SSO configuration.
  • Introducing support for attributes in the SAML Response when configuring the SSO Apps.
  • Option to disable file expiration alerts and email notifications in the fine-grained control panel. 
  • Option to edit the organization display name on the subscription page.
  • Earlier, the search option in the Azure AD Integration page fetched users only from the current page. Now, the search will fetch users from the whole Azure AD users list.  
  • Earlier, there was an issue with domain validation using CNAME method. This has been fixed.

Oct

New

New Features and Enhancements

  • Export Secrets - Provision to export secrets from the offline access file and scheduled backup email in general CSV (or) Zoho Vault format CSV.
  • The hierarchical tree structure is now also maintained in shared sub-chambers.
  • Earlier, there were some issues while checking consecutive characters in the password assessment report. This has been fixed.
  • Earlier, the password assessment report was generated before the complete loading of the dictionary word checker script. This has been fixed. 

Sep

New

New Features and Enhancements

  • SAML-based Single Sign-on for Cloud Apps - With SAML-based SSO, Zoho Vault will now also provide highly secure, federated access to cloud applications, without users having to enter their credentials, skipping the login screen altogether. The authentication will take place in the background automatically. 
  • Option to add multiple URLs in the browser extensions. 
 

Jul

Bug-Fix

Bug Fixes

  • Earlier, there were some minor issues in the sub-chambers. This has been fixed.
     

Jun

New

New Features and Enhancements

  • Password Assessment Report - This report analyzes the strength of passwords and provide assessment details to users. All passwords - enterprise and personal types - owned by users are assessed based on various pre-defined criteria. Passwords found to be scoring low on assessment are labeled as 'weak' and users can replace them with strong, unique passwords thereby improving security.
  • Password Security Analysis Report - A collective information about the overall strength of enterprise passwords for administrators in the form of highly intuitive and actionable security analysis report. Admins can get a clear picture of the number of weak passwords in the organization, the number of weak passwords used by each user, average password strength and also alert users to change weak passwords.
  • Sub-chamber - Option to add sub-groups to each chamber.
  • Option to configure passwords that will never expire in the password policy.
  • Option to copy custom secrets fields to the clipboard.
  • Option to import shared chambers.
  • Option to import secrets from PasswordWallet, Roboform.
  • Option to selectively exclude owned and shared secrets while exporting secrets.
  • Option to transfer the ownership of chambers when acquiring secrets from a user.
  • Earlier, IP restriction can be configured only from the web interface. Now, users can configure it from their mobile apps.
  • Earlier, there were some issues in the Azure AD user import. This has been fixed.
  • Earlier, there were some issues in the Admin page when changing the user roles. This has been fixed. 
  • Earlier, sharing with outsiders option can be performed only by the password owners. Now, users with 'Manage' permission can also share secrets with outsiders. 

Apr

New

New Features and Enhancements

  • Forgot Your Passphrase - Users can now reset their passphrase themselves using this option. Earlier, they should raise a request to admin to reset their passphrase.
  • Earlier, there were some issues in the Azure AD integration. This has been fixed.

Mar

Bug-Fix

Bug Fixes

  • Earlier, there were some minor issues while importing secrets. This has been fixed.
     

Jan

Bug-Fix

Bug Fixes

  • Earlier, there were some issues in the auto login. This has been fixed. 
     

2016

Nov

New

New Features and Enhancements

  • Secret History - Option to capture the history of changes made to username, password, and other fields. The last five changes will be recorded. 
  • Change Password - Option to automatically change passwords for secrets in a single click, thus relieving users from the hefty task of manually resetting them from their respective accounts. 
  • Minor bug fixes have been fixed.

Oct

New

New Feature

  • Beta version of the Safari add-on released.
     

Sep

New

New Features and Enhancements

  • Earlier, there were some issues in the secret name search option. This has been fixed.
  • Option to restrict adding and sharing secrets.
  • Enhancements to the Sticky password import operation.
  • Option to search and list secrets name in a consecutive order.
  • Option to filter and display only the shared secrets in the All Secrets page.

Aug

New

New Features and Enhancements

  • Emergency Access: Option to keep the Super Admin or any user as an emergency contact for emergency access to enterprise secrets.
  • Azure AD Integration: Option to import users from Microsoft Azure AD and login to Zoho Vault in a single-click using the power of SAML 2.0 protocol. 
  • Option to upload files from cloud storage services like Zoho docs, GDrive, Dropbox,  etc.
  • Earlier, there were some issues in secret duplication while attaching files. This has been fixed.

Jul

Bug-Fix

Bug Fixes and Enhancements

  • Bookmarklet customized to perform autofill operation for Adobe website.
  • Earlier, there were some issues related to admin console role update. This has been fixed.

Jun

New

New Feature

  • Expiration Alerts: Option to receive alerts and email notifications on secrets expiry. 
     

May

Bug-Fix

Bug Fixes and Enhancements

  • Earlier, there was some issues in the secret import option. These have been fixed.
  • Earlier, there were some issues in the secret logo upload. These have been fixed.

Apr

New

New Features and Enhancements

  • Option to import secrets from Intel Truekey JSON.
  • Option to edit secret classification in bulk.
  • Earlier, there were some issues in the "http" prefix. These have been fixed.
  • Earlier, there were issues due to which backup emails were not sent to users as configured. These have been fixed.

Mar

New

New Features and Enhancements

  • Option to view and manage chambers associated with each secret.
  • Option to acquire secrets and transfer its ownership to another user.
  • Option to hide secret types globally.
  • Option to upload and download SAML metadata in the Active Directory integration.
  • Earlier, there were some issues while taking the offline backup file. These have been fixed.
  • Earlier, there were some issues while uploading metadata in Safari and Chrome browsers. These have been fixed.

Jan

Bug-Fix

Bug Fix

  • Minor issues in the Firefox add on has been fixed.
     

2015

Dec

New

New Feature

  • Sharing with Outsider: Option to share sensitive passwords temporarily with external users (contractors, third-party consultants, etc), whom do not hold a Zoho account. You can share secrets with outsiders by sending them a timed link to the secrets via email that will automatically expire after 30 minutes.
     

Oct

New

New Features and Enhancements

  • Earlier, there were some issues while importing the backup HTML file. These have been fixed.
  • Earlier, there were some URL issues in the Transmail. These have been fixed. 
  • Earlier, there were some issues while importing secrets from LastPass. These have been fixed. 
  • Earlier, there were some issues while updating secrets. These have been fixed. 
  • Option to import the group name while importing secrets from LastPass.

Sep

New

New Features and Enhancements

  • Earlier, there were some duplication issues while adding secrets from the native mobile apps. These have been fixed.
  • Earlier, there were some issues in the access control mechanism. These have been fixed.
  • Earlier, there were some issues in the policy enforcement for non-mandatory secrets. These have been fixed.
  • Mobile apps link added to the user dashboard.

Aug

Updates

Enterprise Edition

  • Active Directory integration -  Option to import users from your corporate identity stores (AD/LDAP) into Zoho Vault. Enterprises can maintain the same user group structures as in AD and quickly share a group of passwords in bulk with any user group. Admins can keep user database constantly synced with Active Directory and automate deprovisioning whenever an employee leaves the organization. In addition, users can also access Zoho Vault using their AD credentials.
  • Password access control (request-release) workflow - Option to add an additional layer of security by requiring users to request to view passwords. Access controls can be configured for all or selective secrets as needed. Built-in options also let administrators release passwords for a limited time period after approving access requests. The admin can also exclude certain users from having to make requests.
  • Notifications on password events - Option to receive email notifications upon the occurrence of specific password events such as secret addition, retrieval, modification/deletion, and others.

Jul

New

New Feature

  • Option to import secrets from Mitro.
     

Jun

New

New Features and Enhancements

  • Option to enter login credential using a virtual keyboard during the login process.
  • Option to delete users and sharing keys from the admin console.
  • Earlier, there were some issues while sharing a secret with a user group. These have been fixed.

May

New

New Features and Enhancements

  • Earlier, there were some issues while importing URL during the secret import process. These have been fixed.   
  • Earlier, there were some alignment issues while navigating the All Secrets page. These have been fixed.
  • Earlier, there were some issues while editing secrets. These have been fixed.

Feb

New

New Features and Enhancements

  • IP Restriction: Option to access Zoho Vault only from a specific IP address range. This can be done by either white-listing or black-listing specific IPs or an IP range from which users access Zoho Vault. Additionally, admins can exempt specific users from these restrictions as needed.
  • Option to import secrets from Passpack.
  • Earlier, there were some issues in secrets and URL loading in the All Secrets page. These have been fixed.
  • Option to search secrets using Tags.
  • Earlier, there were some issues while importing secrets and tags from a standard CSV file. These have been fixed.
  • Earlier, there were some issues related to IP Restriction. These have been fixed.

Jan

Enhancement

Enhancements and Bug Fixes

  • Earlier, there were some issues related to granting and revoking access to users. These have been fixed.

2014

Dec

New

New Features and Enhancements

  • An advanced search option is now provided in the audit section.
  • Audits can be now exported as PDF.
  • User groups will now only list the users who are part of that group. Deleted users will not be displayed in the list anymore.
  • The maximum secret file storage limit is now extended up to 1 MB.
  • Option to search users with their email address in the user management tab.

Oct

New

New Feature

  • Chamber Access Report: A report to get a clear picture on the chambers created/used by all users in the organization.

Sep

New

New Features and Enhancements

  • Chamber loading process optimized.
  • Option to modify chambers (add and remove secrets) is now supported. 
  • Native mobile apps can now be used by free users. 

Aug

New

New Features and Enhancements

  • Browser Extensions: Seamlessly auto-login to websites and applications, access existing passwords, and new secrets all from Zoho Vault's extensions for Chrome and Firefox browsers, without leaving your current  browser tab.
  • Earlier, there were some issues in GApps user import. These have been fixed.

Jul

New

New Features and Enhancements

  • Option to import passwords from other password managers like LastPass, Passpack.
  • Custom Secret Type: Option to add new or edit existing secret type based on specific requirements.
  • GApps Integration: 
    • Provision for importing users and user groups from GApps
    • Provision for importing secrets from a text/CSV file in Google Drive
    • Provision for exporting offline encrypted copy of secrets to Google Drive
  • Option to delete the organization in the Admin tab.
  • Option to add a new user or modify the role of an existing user as Super Admin in the User Management tab. 

Mar

New

New Features and Enhancements

  • Earlier, the click-to-login configuration status and user search did not work properly. This has been fixed.
  • Earlier, there were some issues in exporting secrets. These have been fixed.
  • Provision to add notes while exporting secrets.
  • Notifications to admin about pending secret approval requests.
  • Option to enable and disable auto submit provided under More Actions.

Feb

New

New Features and Enhancements

  • Users can now attach secure files to secrets.
  • While importing secrets, users can now choose whether the secrets are to be added as or Enterprise secrets.
  • Organization administrators can now view the details such as organization creation time, the number of secrets stored, the number of users, etc. in the Organization Details page.
  • Acquire secrets settings option is now removed from the Admin page.  

Jan

New

New Feature

  • Two-Factor Authentication: Admins can now enforce TFA at org level and also update/reset user TFA status anytime.

2013

Dec

New

New Features and Enhancements

  • Acquire Secrets: Provision for Super Administrators to forcefully acquire all 'Enterprise' level secrets owned by any user irrespective of their roles (personal secrets cannot be acquired). 
  • Fine-Grained Access Controls: Administrators can now allow/restrict certain features organization-wide and selectively exempt users when needed. 
    • Option to restrict / allow adding Personal secrets 
    • Option to restrict / allow export of secrets 
    • Option to restrict / allow downloading HTML for offline access 
    • Option to restrict / allow mobile access 

They can modify these controls any time.

  • Provision for sharing chambers to users and user groups.
  • Users can now view the secrets they share by clicking  Shared by Me and share to them by clicking the Shared to Me icon in the All Secrets page. 
  • Option to reset sharing for all secrets.
  • Option to enable/disable restrictive Admin tasks from the Admin tab.

Nov

New

New Features and Enhancements

  • Earlier, there were some issues while recording IP addresses in the audit. These have been fixed.
  • Option to restrict users from storing notes during secret addition.
  • Earlier, while scrolling down the Add/Edit, popup was not visible properly. This has been fixed.
  • Usernames are now sorted in alphabetical order while sharing secrets.

Oct

New

New Features and Enhancements

  • Floating menu is now provided in Secrets, Chambers, and Auto Login pages for easy navigation.
  • Users can now edit their already existing other Zoho application's organization with a new one during account set-up.

Sep

New

New Feature

  • Users can now add secure notes while adding secrets. 

Aug

New

New Features and Enhancements

  • Option to export all secrets in plain-text to text file which can be stored on users devices. The entries will be printed in comma separated form in a text field. 
  • Forgot Passphrase: Option to reset the passphrase is given to users to start all over afresh.
  • One-click Login: Option to share secrets without revealing them in plain-text. Users will be only permitted to do auto login.

Jul

New

New Features and Enhancements

  • Generation of wrong/invalid RSA keys is prohibited by asking the user to regenerate the key pair.
  • Option to schedule payments is provided to users.
  • Earlier, some users who were using Zoho Vault for personal use faced a blank screen randomly. This has been fixed.

Jun

New

New Features and Enhancements

  • Option to search users is provided on Add Users page. 
  • Option to search secrets is provided on Secrets page.
  • The bookmarklet will be regenerated whenever the passphrase is changed.
  • Earlier, there were some issues in mapping secrets in Zoho Vault database. This has been fixed.
  • Option to navigate audit logs based on the number of audit rows.

May

Updates

Product Launch

  • The official launch of Zoho Vault at Zoholics.