Sébastien Aubin

Hi Daniel, Thanks.

Rather than adding alphabets one by one, we'll make them customizable, as you suggested:

- Per user: a JSON file in the RDM settings folder, one word per character. No UI editor.

- Per team: an administrator can define alphabets in the data source settings (SQL Server and Devolutions Server).

With this, you'll be able to add the 2025 Austrian alphabet.

Best regards,

Hi Daniel,

Thanks for the suggestions. Here is what's coming in an upcoming version of the "View password" window:

- Spelling alphabet picker: NATO, German (DIN 5009), Italian, Dutch or Swedish, or Automatic (follows the UI language, the current behavior).

- Grid layout: one cell per character with its position, the spelled word and its type (uppercase, lowercase, digit, symbol). The current text layout remains available in the settings menu.

- Large display: enlarges the password, with or without the hints.

These settings are remembered.

Best regards,

Hi, the remaining feature will be available in the next minor release of DVLS.

Best regards,

Hi Daniel,

Thanks for the detailed suggestions, and for the follow-up comment.

You're right about the casing: it's intentional. Lowercase letters are spelled in lowercase and uppercase letters in ALL CAPS, so the case comes through in the hint. We agree it isn't obvious at first glance, though.

The "View password" window could use a refresh, so we'll create a ticket and look at your ideas as part of that work:

- Alternative spelling alphabets, alongside NATO (e.g. DIN 5009 for German), possibly with a default based on the UI language

- Readability, including a larger display mode for showing credentials to someone across the room

- How the hints are formatted, including how upper/lowercase is shown

To help us prioritize, which language/alphabet would you use day to day?

Thanks again for the feedback!

Best regards,

Hello, I've created a ticket for your request and I will let you know when it's available.

Best regards,

Hi, this feature has been implemented in the latest version of Password Manager (2026.3.5.0).

Best regards,

Hi,

Thanks again for the detailed request. Part of it is now available in Devolutions Server 2026.3.13.0:

- RDPConfigured and WebBrowser entries can now be created with POST without passing a subType. Previously, leaving it out returned a 422.

- PUT and PATCH now work on WebBrowser entries.

- host and port (RDP) and url (WebBrowser) can now be set with POST, PUT and PATCH. They are also returned by GET and listed in /api/v1/entry/definition.

This also corrects our earlier reply: before this version, omitting subType failed, and PATCH did not actually update host or URL.

The rest of your request isn't in this release: setting the linked credential (CredentialConnectionID) through the API, and support for the AWS and DataReport entry types. These need more work, including a security review, and should come in an upcoming version. We'll update this thread when they're available.

Best regards,

Hi, this feature has been implemented in the latest version of DVLS (2026.3.13.0)

Best regards,

Hi, thank you for your request, i'll create a ticket for it and I will update you as soon as I can.

Best regards,

Hello Florian,

The Backup Manager doesn't currently support credentials for the destination share. Writes are done under these Windows identities:

- Web files backup: the DVLS application pool identity.

- SQL Server database backup: the SQL Server service account, since SQL Server writes the .bak file itself.

Workaround: keep the share authenticated and grant write access only to those accounts, either the computer accounts (DOMAIN\SERVERNAME$) or a dedicated service account / gMSA.

We've logged a feature request to add username/password authentication for the backup destination (DVLS-15625). We'll update this thread when it's planned.

Best regards,

Hi, this feature will be in the next minor version.

Best regards

Hi, this should be in an upcoming minor version of DVLS.

Best regards,

Hello,

I agree, this would be a useful addition. We’ll add a screen capture protection option to the Devolutions Password Manager desktop app, similar to the one in RDM. It should be available very soon. I will let you know when it's available.

Best regards,

Hi,

Thanks again for the detailed request, here's where things stand.

Per-session data through the REST API. We're adding activity logs to the Devolutions Server public REST API (/api/v1, authenticated with an application identity); it will be available in a future release:

- GET /api/v1/log/activity: paged JSON, filtered by date range, vault, entry, user and event type.

- GET /api/v1/log/activity/export: the same data as a CSV file (date range required, up to 180 days).

Each row has the vault, entry name, target host, protocol (entry type), user, start and end time, duration and active time. To get the sessions only, add messageType=OpenConnection. With one vault per customer, filtering on vaultId gives you a monthly per-customer statement.

In the meantime, the scheduled Activity Logs report can already e-mail you that CSV every month, filtered per vault.

PDF statements and AI session summaries are tracked as separate improvements. We've noted that the summaries must be processed on premises for GDPR; for reference, the Devolutions Server AI assistant already supports local models through Ollama. We'll keep you posted, and we'll gladly take you up on your offer to test early.

Thanks,

Sébastien

Hi, this feature has been implemented and should be released very soon. We'll let you know when it's available.

Best regards,

Hi joebruns,

Thanks for the suggestion! Before we look into it, could you tell us a bit more about how you would use it?

1. One-time import: you browse to the file, RDM reads the password, stores it encrypted in the entry, and the file is no longer needed.

2. Live reference: RDM keeps a link to the file and reads it every time you connect, for example because another tool rotates the password and rewrites the file.

Option 2 means the password stays in clear text on disk, which goes against the purpose of a password manager, so we'd be careful with that approach. If that's your scenario, these could already cover it:

- External credential providers: RDM can fetch credentials at connection time from Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, CyberArk and others.

- PowerShell: with the RDM PowerShell module, you can read the file and update the entry with Set-RDMEntryPassword, for example from a scheduled task after each rotation.

Let us know which scenario matches yours and we'll go from there.

Best regards,

Hi, i've created a ticket for your request. We will let you know as soon as we have updates for you.

Best regards,

Hi, I created a ticket and we will let you know once we have an update.

Best regards,

Hi,

Thanks for your patience, and sorry for the delay. I dug into this in detail and split your request into two tickets.

1. Fixes for RDPConfigured and WebBrowser entries (done)

While testing, I found that part of my previous answer was wrong, and I apologize for that:

- Omitting subType on POST /api/v1/vault/{vaultId}/entry returned 422 for RDPConfigured and WebBrowser entries, which was the opposite of what I told you.

- host/port (RDP) and url (Web) sent in data were silently ignored: the call succeeded, but the values were not saved or returned.

- PUT/PATCH on WebBrowser entries returned 422, including for entries created in RDM.

All three are fixed. With the fix:

- subType can be omitted.

- host, port and url can be set with POST, PUT and PATCH, are returned by GET, and appear in GET /api/v1/entry/definition.

- For WebBrowser entries, subType can name the browser (for example Edge).

The fix will be included in an upcoming DVLS release. Until then, you can create RDP and Web entries by sending "subType": "" explicitly, but host and URL can't be set through the API yet.

2. The rest of your request (in development)

The second ticket covers:

- setting and changing the linked credential (credentialConnectionId) on session entries, with validation of the referenced credential and your permissions on it;

- creating Aws and DataReport entries through the API, and adding them to GET /api/v1/entry/definition.

This part is larger because it touches credential links and secret handling, so it goes through a security review. I'll update this thread when it's available.

Thanks again for the detailed report. It helped us find these issues.

Best regards,

Hi, i've updated the priority of this ticket. We'll let you know as soon as it's available.

Best regards,

Hi miccol,

Good news: this option is already available in the DVLS web interface.

On a Website entry:

1. In the General section, set Display to Embedded or Undocked.

2. Open the Settings section and check Clear cache.

The option only appears with Embedded or Undocked, because those are the modes that use the built-in WebView2 browser. With External, the page opens in your own browser, so there is no WebView2 cache to clear. This works the same way in RDM.

It has been available since DVLS 2022.2.7.0, so any recent version should have it. If you still don't see it, or the cache isn't cleared when Launcher opens the page, let us know your DVLS and Launcher versions and we'll take a closer look.

Regards,

Hi, I've created a ticket for your request. We'll let you know when it's available.

Best regards,

Hi, i've created the ticket for your request. We'll let you know when it's available.

Best regards,

Hi, this feature has been implemented in the latest version (2026.3.1.0), the Azure Application proxy is now supported in Devolutions Password Manager Desktop and mobile.

Bonjour Maxime, cela pourrait effectivement être très intéressant et utile. Nous allons voir ce que nous pouvons faire à cet effet et vous revenir avec des nouvelles dans les plus brefs délais.

Bonne journée,