Frequently asked questions

Yes. It is free with any Manic licence. Sign in to your account to download it.

It is one place for the accounts, groups and permissions of your Manic Pulse servers, Manic Vault Team servers and Manic Toolkit apps. Instead of keeping a separate user list on every server, you link each one to Control.

Linux (systemd, x64 or ARM64), Windows Server (x64) or Docker. The portal and linked servers and apps use one port, TCP 5290 (HTTPS).

Yes. Control supports built-in accounts, or Active Directory / LDAP sign-in over LDAPS (636) or LDAP with StartTLS (389). It needs only a read-only service account, and never writes to the directory. A Test a sign-in panel shows which groups the directory returned.

Wrong passwords lock the app for 5 minutes after 3 tries, then 15 minutes after 3 more, and then fully until an administrator unlocks it in Control. Apps check in every 30 seconds, even while locked, so an unlock takes effect within moments.

The Toolkit app accepts the last good sign-in on that computer, so people can still work offline. Manic Vault Team members sign in with their device key as usual. The person who links a Pulse server stays as a local break-glass administrator.

No. Control never sees keys, items, collection names or master passwords. It only tells a Manic Vault Team server who a person is and which role they have.

Run the reset-password command on the server to make a new one-time password, then restart the service. It also unlocks the account.