---
title: Shared Accounts Password Management (SAPM)
slug: kronpam-legacy-ui-reference-guide-3-5-0/shared-accounts-password-management-sapm
description: Learn how the Shared Accounts Password Management (SAPM) feature securely stores and manages shared privileged accounts' passwords. Discover the two types of accounts supported, including dynamic accounts that have password changes logged by the Password 
docTags: 
createdAt: 2022-07-28T13:10:06.000Z
---

The Shared Accounts Password Management (SAPM) feature is used to store shared privileged 
accounts’ passwords that are used by more than one person. SAPM stores 2 types of accounts: Dynamic and Static.

In Dynamic accounts, once an account is configured in SAPM, the Password Vault connects to 
the system, changes, and stores the password, after encrypting it. During the password lifecycle, 
the Password Vault changes the password periodically, and after each checkout. It logs 
checkout details, like the user, date, time, and reason, and provides accountability for password 
checkout events.


Static accounts are accounts that are statically stored on the SAPM. Before adding a device’s 
local accounts to SAPM, the account passwords are checked and stored. These accounts are 
called dynamic configured static accounts. When static accounts are stored without any device 
connection, they are called static configured static accounts.