Boom Media ERP
Smart Booking - BOOM WORK
Password Vault

Bank-Grade
Password Vault

Enterprise-grade password vault with AES-256 encryption, granular permissions, full audit trail, and 2FA storage — built into your ERP.

Activate BOOM PASS
Security & Access

An Encrypted Password Vault Built Into BOOM ERP

One vault for your team's credentials — encrypted at rest, shared by staff, role, or department, fully audited, and linked to your CRM clients.

Encrypted at Rest

Every password and secret is encrypted with AES-256-CBC and protected by an HMAC integrity check before it touches the database. The encryption key is generated as 256-bit random data and can be moved into your server config file.

  • AES-256-CBC + HMAC-SHA256
  • Encrypt-then-MAC integrity
  • 256-bit auto-generated key
  • No plain-text secrets stored

Granular Access Control

Access is controlled per record, so each credential is visible only to the staff, roles, or departments you choose. Anyone not shared in simply cannot see the record in lists or search.

  • Share per staff member
  • Share per role or department
  • "All staff with permission" option
  • Hidden from non-shared users

Complete Audit Trail

Every reveal, copy, edit, and grant is logged with the staff member, IP address, and timestamp. Stored values are sanitized so no password ever appears in the log.

  • Logs reveal & copy events
  • Staff ID + IP + timestamp
  • No plaintext in logs
  • Filterable audit report

Emergency Break-Glass Access

An admin can grant a staff member temporary access to one record for a set number of hours. The grant expires automatically and every grant and revoke is recorded.

  • Admin-granted, time-limited
  • Auto-expires after the window
  • Revocable early by admin
  • Grant and revoke audited

2FA and Recovery Codes

Store 2FA backup codes and recovery notes encrypted in the same record as the password. Revealing them is watermarked with your name and time and recorded in the audit trail.

  • Encrypted 2FA / backup codes
  • Encrypted recovery notes
  • Watermarked reveal modal
  • Reveal action is audited

Per-Record Attachments

Attach PDFs, images, and text files to any credential record in a folder protected from direct web access. Downloads pass a permission check and are written to the audit log.

  • PDF, image & text files
  • Protected uploads folder
  • Permission-gated downloads
  • Every file action audited

Client-Linked Credentials

Link any password to a CRM client so it appears under a Passwords tab on that client's profile. Export a branded PDF of all of a client's credentials in one click.

  • Link records to clients
  • Passwords tab on client profile
  • One-click per-client PDF
  • Organized by folder & platform

Roles, Folders & Expiry

Nine staff capabilities split viewing, revealing, editing, exporting, and settings across your team. Organize credentials by folder and platform, and flag passwords that are due for rotation.

  • 9 granular permissions
  • Folders and platforms
  • Password-expiry reminders
  • Built-in password generator
AES-256Encryption (CBC + HMAC)
9Staff Permissions
Break-GlassEmergency Access
Per-RecordAudit Logging
The Module

BOOM PASS: A Secure Password Vault for Your Team

BOOM PASS stores and shares your team's passwords securely with encrypted vaults and access control — built into the same platform that runs your business. Built for teams in Jordan and the Middle East.

Sharing passwords over chat and sticky notes is a security breach waiting to happen. An encrypted vault keeps your team's passwords protected, shared only with the right people, with every reveal and copy recorded.

How it works

How BOOM PASS Keeps You Secure

Store securely

Keep all team passwords in an encrypted vault, not in chats.

Share with control

Share each password only with the staff, roles, or departments you choose.

Manage access

Grant or revoke access instantly when your team changes.

Stay in control

See who has access to what, with a clear audit trail.

Capabilities

Everything You Need to Protect Access

A secure password vault for your whole team:

  • Encrypted vaults — passwords encrypted with AES-256-CBC.
  • Secure sharing — share access without sharing the password.
  • Access control — grant and revoke instantly.
  • Audit trail — know who accessed what, and when.
  • Team-ready — organize by folder, role, or department.
  • Built into BOOM ERP — one platform for your business.
  • Fully Arabic & cloud-based.
Questions

Frequently Asked Questions

What is BOOM PASS?+
BOOM PASS is a secure, encrypted password vault that lets your team store account credentials and share them only with the staff, roles, or departments you choose.
How is it more secure than sharing over chat?+
Passwords are encrypted at rest and shared only with chosen staff, roles, or departments instead of being pasted into chats or notes — and every reveal or copy is logged.
Can I control who has access?+
Yes. You grant and revoke access per person, team, or role, with a full audit trail of who accessed what.
Is it part of BOOM ERP?+
Yes. BOOM PASS is built into the same platform that runs your business, so security is centralized.
Is it suitable for teams in the Middle East?+
Absolutely. It's fully Arabic and cloud-based, and you can start with a free trial.

Stop sharing passwords on WhatsApp.

Activate BOOM PASS Now