---
title: Password Vault Support in the Kron PAM Desktop Client
slug: kronpam-end-user-guide-3-8-1/hd4n-password-vault-support-in-the-kron-pam-desktop-client
docTags: 
createdAt: 2025-07-03T07:41:06.967Z
---

If the user has sufficient portal privileges and permissions, the user can list both Vault Account Groups and Vault Accounts that are bound to these groups over the Kron PAM Desktop Client. Moreover, the user can search the Vault Accounts by using the filters.

For the details of the password vault, please refer to the Password Vault Section in the[Reference Guide](docId\:hGPjfiZi0v6YRoIO9Zqak). 

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/UztSutNHtFHkgJApm6Srl_image.png" size="50" caption="Password Vault on Kron PAM Desktop Client" isUploading="false" width="464" height="893" darkWidth="464" darkHeight="893" showCaption="true"}

If there is no approval flow for the **static **vault account, the user clicks the **Check out **button to check out the passwords/SSH keys, etc, depending on the Vault Configuration.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/VITC6iND-qBLEYNPe8WEY_image.png" size="40" caption="Check out the password of an Account with Device (Static Type)" isUploading="false" width="383" height="738" darkWidth="383" darkHeight="738" showCaption="true"}

If there is no approval flow for the **dynamic **vault account, once the user clicks the **Check out **button, they should select the duration and write a comment before checking the password out.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/D3JmmpjaxEXymFjHNRQYq_image.png" size="40" caption="Setting duration and comment before checking out the password of the dynamic type" isUploading="false" width="394" height="757" darkWidth="394" darkHeight="757" showCaption="true"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/hyaKWSa6dxklS2Tnk9nPw_image.png" size="40" caption="Check out the password related to the Account with Device (Dynamic Type)" isUploading="false" width="386" height="740" darkWidth="386" darkHeight="740" showCaption="true"}

If there is an** approval flow for the dynamic or static vault account**, before checking the password out, the requester should send an approval request. To do so, the user should click the **Check out** button. This time, it leads to another screen, and after the user enters duration and comments on this screen, the user should click the **Request Approval** button.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ic_VRdF3Y6TBJawt0ERjL_image.png" size="40" caption="Requesting Approval before checking the password out" isUploading="false" width="406" height="769" darkWidth="406" darkHeight="769" showCaption="true"}