Deploying Enpass on Windows

This page covers how to install Enpass Password Manager on Windows endpoints, configure it for your organization, and deploy it at scale using a UEM/MDM platform.

Manual Installation

For unmanaged environments or individual installs, Enpass can be installed from two sources.

From the Microsoft Store

1. Open the Microsoft Store listing for Enpass Password Manager.

2. Click Get to download and install.

3. Click Open to launch the app.

From the Enpass Website

1. Download the installer from enpass.io/downloads.

2. Double-click the downloaded Enpass-setup.exe.

3. Click Yes when the User Account Control dialog appears.

4. Accept the terms and conditions, then click Install.

5. Click Launch to open the app.

Silent Installation (for scripted deployments)

The Enpass-setup.exe installer supports the following command-line flags:

Example

Enpass-setup.exe /ALLUSER /S

App Configuration

Before deploying Enpass, administrators can pre-configure the application by setting registry keys on the user's device. These keys must be in place before Enpass is first launched.

Configuration keys are written to:

HKEY_CURRENT_USER\SOFTWARE\Sinew Software Systems Pvt Ltd\Policy

Sample .reg file:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Sinew Software Systems Pvt Ltd\Policy]
"policy-email"="user@your-org.io"
"policy-enforced"="true"

Replace user@your-org.io with a dynamic variable mapped to the user's email address in your UEM solution.

For a full description of all supported keys including policy-enforced-data-location, see the App Configuration Keys Reference.

Deploying via UEM/MDM

For managed environments, deployment involves two steps: pushing the installer, then applying the registry configuration.

General steps for any UEM/MDM platform:

1. Package Enpass-setup.exe using your UEM's Win32 packaging tool.

2. Set the install command to Enpass-setup.exe /ALLUSER /S.

3. Use your UEM's scripting or registry management capability to write the configuration keys under HKCU\SOFTWARE\Sinew Software Systems Pvt Ltd\Policy for each user before or during deployment.

4. Assign the package and configuration to the appropriate user or device groups.

Deploying via Microsoft Intune?

For step-by-step instructions specific to Microsoft Intune, including Win32 packaging, detection rules, and PowerShell-based registry configuration, see:

→ Packaging Enpass for Windows via Microsoft Intune