Hi there, welcome to Cerby Protect!

First, thank you for choosing Cerby to safeguard your sensitive data. We are a cybersecurity company focused on helping you and your organization manage and secure access to your day-to-day applications.

Cerby Protect is our enterprise password management product designed to provide you with a seamless security experience and increase your productivity by making it easier for you and your colleagues to access the accounts and information you need to do your job.

In the following sections, we will walk you through the basic information and the first steps to take to start using Cerby Protect:

Cerby Protect is an enterprise password management product built to safeguard the following corporate sensitive data:

The following sections explain how we protect your data and increase your productivity:

The Cerby platform offers two encryption schemes for the vaults where you store your data: cloud and local encryption. The goal is to let you select the approach that aligns with your security needs, regulatory compliance, and operational requirements.

By default, when you set up a new workspace, the Cerby platform creates a cloud vault, but you can create additional vaults for your organization to leverage the local encryption scheme and a Zero Knowledge architecture.

With local encryption vaults, Cerby has no knowledge or access to the decryption keys and the data stored within the encrypted vaults. Your data remains private and confidential because vaults are logically separated and the architecture prevents access from unauthorized parties, including Cerby.

Additionally, you can share vaults with specific users to ensure no one else in the workspace can access the stored items.

The following table describes the main characteristics that differentiate both schemes.

For more information on the encryption schemes, read the How Cerby protects your data with cloud and local encryption article.

The Cerby platform comprises three client apps that work together to provide you with the best experience as a Cerby Protect user:

The Cerby web app is the interface that enables you to perform all the management actions on the accounts and secrets you save in Cerby, as well as on the users who belong to your workspace.

The following are the actions you can perform:

You can use any web browser to access the Cerby web app, and all of your interactions are through a dashboard that’s displayed after logging in to your workspace, as shown in Figure 1.

Our Cerby web app is constantly updated by our Development team, meaning that you always have access to the latest features and improvements.

The Cerby browser extension is an add-on for web browsers that complements the user experience. The following are the actions you can perform:

After logging in to your workspace with the Cerby browser extension, your interactions are through a popup and an inline menu, as shown in Figure 2 and Figure 3.

The Cerby browser extension can be installed on demand or distributed to all corporate computers via a Mobile Device Management (MDM) solution. You receive the latest version automatically each time the Development team pushes a new version.

The following web browsers are supported for MacOS and Windows computers:

The Cerby mobile app is the interface that enables you to access the account and secrets from your mobile phone. The following are the actions you can perform:

You can use iOS and Android devices to access the Cerby mobile app, and all of your interactions are through a dashboard that’s displayed after logging in to your workspace, as shown in Figure 4.

Cerby Protect provides the following security best practices that you can implement to keep your data safe:

Cerby Protect takes a step further as an enterprise password management product by enabling you to share access to your items to boost collaboration and productivity.

When sharing accounts, secrets, or collections, you can implement the principle of least privilege and assign other users the following roles on the items:

The dashboard in the Cerby web app enables you to keep your items organized as follows:

Cerby Protect provides you with visibility around the user activity within a workspace and on shared items to perform the following actions:

This information is available through the Activity view, as shown in Figure 5.

User activity information can be exported to a third-party service, such as Sumo Logic or Splunk.

Now that you know the basic concepts of Cerby Protect, it’s time to start using the Cerby platform. The first step is to log in to your workspace.

A workspace is a collaboration environment where organizations manage and secure access to their accounts, secrets, and collections. After the Workspace Owners create a workspace, its name is displayed and identified as follows: <workspace name>.cerby.com.

The login experience is the same for all the Cerby client apps: in the login screen or page, you must enter the workspace name first; then, you are redirected to your IdP’s login page to enter your credentials and authenticate via SSO. If your IdP has 2FA enforced, you’ll be prompted to set it up.

To log in to your workspace, follow the instructions in the How to log in to your Cerby workspace video.

For an optimal user experience, Cerby recommends installing the browser extension and mobile app.

If your company uses an MDM service, the Cerby browser extension may have been already installed on your computer. To install it manually, navigate to the website according to your web browser and follow the installation instructions:

To install the Cerby mobile app, navigate to the website according to your operating system and follow the installation instructions:

Whenever you log in to your workspace with a new device using any of the Cerby client apps, you will be automatically prompted to set it up as a trusted device. This is a security requirement.

To set up a trusted device, follow the instructions in the How to set up and manage your trusted devices article.

Now that you have accessed the Cerby platform, let’s start adding items. Currently, you have three options to do so in Cerby:

The following sections describe each option.

With our Password Manager Importer, you can transfer from LastPass your corporate folders, passwords, secure notes, attachments, and user access permissions at the same time.

All of the items inside LastPass folders are transferred as follows:

To import your items from LastPass, follow the instructions in the Import items to Cerby article or the How to import items to Cerby via the Password Manager Importer video.

The process to add items to Cerby is different depending on the item type:

The following sections describe the instructions for each item type.

Accounts are the digital records with the login information (such as username and password) for specific apps or service providers. Each account has its corresponding card in the Cerby dashboard.

When adding an account, you are granted the Owner role on it. To add an account, follow the instructions in the How to add and share an account, and view your account details video.

Secrets are the important information that you need to save and share securely with your colleagues, such as license keys, serial numbers, and network login data. You may know them by the name of secure notes, and each secret has its corresponding card in the Cerby dashboard.

You can set up identity challenges for users with shared access to confirm their identity each time they want to view a secret.

When adding a secret, you are granted the Owner role on it. To add a secret, follow the instructions in the Add a secret to Cerby article or How to add and share a secret video.

Collections are groups of accounts and secrets that you can create to help you keep your items organized, and they help you share items in bulk with other users or teams. Each collection has its corresponding card in the Cerby dashboard.

You can only add to a collection the items to which you have the Owner role. When creating a collection, you are granted the Owner role on it. To create a collection, follow the instructions in the How to create and share a collection video.

With Cerby Protect, you can easily save the credentials you enter to access an app manually through its login page. By activating the Save credentials at login feature, the Cerby browser extension can automatically identify your login attempt and suggest you add the account to Cerby.

To save your credentials at login, follow the instructions in the How to save your credentials at login via the Cerby browser extension article.

With your items added to Cerby, let’s start sharing them. Currently, you have two options to do so:

The following sections describe each option.

With Cerby Protect, you can share your items with users and teams within your workspace. When sharing any item, you must assign one of the two following roles:

The process of sharing items is different depending on the item type:

The following sections describe the instructions for each item type.

To share an account, follow the instructions in the How to add and share an account, and view your account details video.

To share a secret, follow the instructions in the How to add and share a secret video.

To share a collection, follow the instructions in the How to create and share a collection video.

With Cerby Protect, you can share your items with external collaborators via a public link. This access grant for accounts and secrets is temporary, because you can set an expiration time and one-time access.

To share accounts and secrets with external collaborators, follow the instructions in the How to share items with external users via a link article.

With Cerby Protect, you can take the following actions to enhance the security of your accounts:

The following sections describe each action.

Cerby provides and manages securely generated email addresses and phone numbers you can use for your accounts and across your organization.

By managing this service, Cerby can improve the logging-in process of your apps by automatically filling your verification codes when 2FA is turned on with an email address or a phone number as a verification method.

If needed, you can also copy the codes manually from your Shared Inbox using any of the Cerby client apps.

To create Cerby-managed second factors through the Cerby web app, follow the instructions in the How to add a Cerby-managed email or phone number to your account video.

Cerby recommends always turning on 2FA for the accounts that offer such a security method. You can set up Cerby as an authenticator app to provide you with time-based one-time passwords (TOTPs).

By managing this service, Cerby can improve the logging-in process of your apps by automatically filling the TOTPs you need. If needed, you can also copy them using the Cerby browser extension and Cerby mobile app.

To turn on 2FA for your accounts, follow the instructions in the How to turn on 2FA for your accounts video. The setup process is performed through the Cerby mobile app.

With the Password generator feature, available through the browser extension, Cerby Protect provides you with a way to generate secure passwords anytime, selecting the strength rules applicable to your app or service provider.

After generating the password, you can use it to sign up for a new account and add it to Cerby, or to rotate the password manually for your accounts both in Cerby and in your app.

To generate a password, follow the instructions in the How to generate passwords using the Cerby browser extension article.

As mentioned above, in the User activity monitoring section, Cerby Protect provides you with visibility around the user activity within a workspace and on the shared items to which you have the Owner role.

The Activity view is enabled for all users to see the activity of the accounts to which they have the Owner role, and Workspace Admins can see the activity of all accounts.

You can perform the following actions from this view:

Cerby Protect offers the following features to boost your collaboration:

The following sections describe each feature.

With Teams, you can simplify user and access management. This feature helps you and your company support groups of users assigned to items and automatically change the Cerby role and user account provisioning to all group members.

You have the following two options to create teams in Cerby:

You can manage all of your teams through the Teams view, as shown in Figure 6.

To add and manage a team, follow the instructions in the How to use Teams article. You can also see the How to add a self-managed team video.

With guest users, you have a secure way to collaborate closer with external parties. This feature helps you and your company support inviting any collaborator who doesn't belong to your domain or corporate directory to join your Cerby workspace.

After joining Cerby, all of the workspace members from your organization who have the Owner role on collections, accounts, and secrets can share their items directly with guest users.

Workspace Admins can manage guest users through the All Members view, as shown in Figure 7.

To add and manage a guest user, follow the instructions in the How to invite a guest user to your workspace article.