> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/rdm/ribbon-menu-bar/administration/system-settings/vault-management/security-settings.md).

# Security settings

{% tabs %}
{% tab title="Windows" %}
![](https://cdnweb.devolutions.net/docs/RDMW4332_2025_1.png)

{% hint style="info" %}
The available settings may vary based on the workspace type.
{% endhint %}

### Workspace security

<table><thead><tr><th width="253.7999267578125">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Create vault with restricted access by default</strong></td><td>Automatically secure the vault settings when creating a repository. Therefore, the permissions settings are set to <em><strong>Never</strong></em>.</td></tr><tr><td><strong>Force workspace multifactor configuration</strong></td><td>Require the users to have a <a href="https://docs.devolutions.net/rdm/workspaces/multi-factor-authentication/">multifactor configuration</a> applied on the workspace. Not shown with Devolutions Server.</td></tr><tr><td><strong>Resolve credentials in overview</strong></td><td>Displays username and password fetched from a Credential repository in the entry overview in the dashboard. Uncheck this option if it takes too long to resolve.</td></tr><tr><td><strong>Allow host override</strong></td><td>Allows host overriding in sessions.</td></tr><tr><td><strong>Disable web browser developer tools</strong></td><td>Disallows the use of developer tools in web browsers for sessions launched in the current workspace.</td></tr><tr><td><strong>Disable website and web browser credential autofill after delay</strong></td><td>Disallows the use of credential autofill in websites and web browsers after a set delay.</td></tr><tr><td><strong>Hide port in RDP</strong></td><td>Masks the port for RDP sessions.</td></tr><tr><td><strong>Custom user password expiration</strong></td><td>Sets an expiration date custom user passwords.</td></tr><tr><td><strong>Scan files for malware</strong></td><td>Automatically scans files for harmful softwares.</td></tr><tr><td><strong>Allow Devolutions Password Manager browser extension autofill</strong></td><td>Permits users to use the Devolutions Password Manager browser extension to autofill credentials in websites and web browsers.</td></tr></tbody></table>

### Default Duo settings

<table><thead><tr><th width="252.199951171875">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Integration key</strong></td><td>Enter Duo integration key.</td></tr><tr><td><strong>Secret key</strong></td><td>Enter Duo secret key.</td></tr><tr><td><strong>API hostname</strong></td><td>Enter Duo API hostname.</td></tr></tbody></table>

### Time-based usage

<table><thead><tr><th width="125.7999267578125">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Days</strong></td><td><p>Select which days the workspace is available for. Select between:</p><ul><li><strong>Any day</strong>: the session can be used any day of the week or weekend.</li><li><strong>Weekdays</strong>: the session can be used only on weekdays.</li><li><strong>Weekends</strong>: the session can be used only on weekends.</li><li><strong>Custom</strong>: manually select each day the session is available for.</li></ul></td></tr><tr><td><strong>Time</strong></td><td><p>Select the hours which the workspace is limited to. Select between:</p><ul><li><strong>Any time</strong>: the session can be used at any hour.</li><li><strong>Custom</strong>: manually select the time frame the session is available for.</li></ul></td></tr><tr><td><strong>Time zone</strong></td><td>Select the time zone you are currently in.</td></tr></tbody></table>

### Event settings

<table><thead><tr><th width="144.20001220703125">SETTING</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Risky events</strong></td><td>Enable entry events that can perform powerful actions such as running an external program or script. These events represent a risk if they are modified by a malicious actor.</td></tr></tbody></table>

### My account settings

<table><thead><tr><th width="198.5999755859375">SETTING</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Forced save location</strong></td><td>Choose to force or not <em><strong>My account settings</strong></em> to be saved in the database or locally.</td></tr></tbody></table>
{% endtab %}

{% tab title="macOS" %}

<figure><img src="https://cdnweb.devolutions.net/docs/RDMM4070_2025_1.png" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
The available settings may vary based on the workspace type.
{% endhint %}

### Workspace security

<table><thead><tr><th width="239.39996337890625">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Create vault with restricted access by default</strong></td><td>Automatically secure the vault settings when creating a repository. Therefore, the permissions settings are set to <em><strong>Never</strong></em>.</td></tr><tr><td><strong>Force workspace multifactor configuration</strong></td><td>Require the users to have a <a href="https://docs.devolutions.net/rdm/workspaces/multi-factor-authentication/">multifactor configuration</a> applied on the workspace. Not shown with Devolutions Server.</td></tr><tr><td><strong>Resolve credentials in overview</strong></td><td>Displays username and password fetched from a Credential repository in the entry overview in the dashboard. Uncheck this option if it takes too long to resolve.</td></tr><tr><td><strong>Allow host override</strong></td><td>Allows host overriding in sessions.</td></tr><tr><td><strong>Disable web browser developer tools</strong></td><td>Disallows the use of developer tools in web browsers for sessions launched in the current workspace.</td></tr><tr><td><strong>Disable website and web browser credential autofill after delay</strong></td><td>Disallows the use of credential autofill in websites and web browsers after a set delay.</td></tr><tr><td><strong>Hide port in RDP</strong></td><td>Masks the port for RDP sessions.</td></tr><tr><td><strong>Custom user password expiration</strong></td><td>Sets an expiration date custom user passwords.</td></tr><tr><td><strong>Scan files for malware</strong></td><td>Automatically scans files for harmful softwares.</td></tr><tr><td><strong>Allow Devolutions Password Manager browser extension autofill</strong></td><td>Permits users to use the Devolutions Password Manager browser extension to autofill credentials in websites and web browsers.</td></tr></tbody></table>

### Default Duo settings

<table><thead><tr><th width="249">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Integration key</strong></td><td>Enter Duo integration key.</td></tr><tr><td><strong>Secret key</strong></td><td>Enter Duo secret key.</td></tr><tr><td><strong>API hostname</strong></td><td>Enter Duo API hostname.</td></tr></tbody></table>

### Time-based usage

<table><thead><tr><th width="132.99993896484375">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Days</strong></td><td><p>Select which days the workspace is available for. Select between:</p><ul><li><strong>Any day</strong>: the session can be used any day of the week or weekend.</li><li><strong>Weekdays</strong>: the session can be used only on weekdays.</li><li><strong>Weekends</strong>: the session can be used only on weekends.</li><li><strong>Custom</strong>: manually select each day the session is available for.</li></ul></td></tr><tr><td><strong>Time</strong></td><td><p>Select the hours which the workspace is limited to. Select between:</p><ul><li><strong>Any time</strong>: the session can be used at any hour.</li><li><strong>Custom</strong>: manually select the time frame the session is available for.</li></ul></td></tr><tr><td><strong>Time zone</strong></td><td>Select the time zone you are currently in.</td></tr></tbody></table>

### Event settings

<table><thead><tr><th width="138.60003662109375">SETTING</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Risky events</strong></td><td>Enable entry events that can perform powerful actions such as running an external program or script. These events represent a risk if they are modified by a malicious actor.</td></tr></tbody></table>

### My account settings

<table><thead><tr><th width="196.20001220703125">SETTING</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Forced save location</strong></td><td>Choose to force or not <em><strong>My account settings</strong></em> to be saved in the database or locally.</td></tr></tbody></table>
{% endtab %}
{% endtabs %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/rdm/ribbon-menu-bar/administration/system-settings/vault-management/security-settings.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.