Installing PasswordLab on DigitalOcean

Installing PasswordLab on DigitalOcean

Welcome to the PasswordLab installation guide for DigitalOcean. This walkthrough will help you set up PasswordLab using the official DigitalOcean Marketplace listing. The process is straightforward, and you’ll have your instance up and running in just a few minutes.

Prerequisites

Before you begin, ensure you have the following ready:

  • A DigitalOcean account
  • A valid PasswordLab license
  • Your SMTP login details (used for 2FA and email notifications)
  • An SSH client (like terminal or PuTTY)

Step 1: Log in to DigitalOcean

  1. Visit https://cloud.digitalocean.com/ and sign in to your account.
  2. Click the Create button at the top right.
  3. Select Droplet from the dropdown.

Step 2: Configure Your Droplet

  1. Choose your datacenter region
    Select the server location closest to your users. For example, if your team is based in the UK, London is a good choice.

  2. Choose an Image

    • Click on the Marketplace tab.
    • In the search bar, type PasswordLab.
    • Select the PasswordLab image.

  3. Choose a CPU Type

    • Select the Regular CPU option (you can pick other types as needed).

  4. Choose a Plan

    • Pick any plan that suits your needs.
    • Even the smallest plan works well with PasswordLab.

  5. Authentication Method

    • Choose SSH Key for password-less logins (recommended).
    • Or select Password if you prefer to log in with credentials.

  6. Set Hostname

    • Name your droplet (e.g., passwordlab).

  7. Click the Create Droplet button to start the server deployment.

Step 3: Access the Server

  1. Once the droplet is created, click Get Started on the droplet details page.
  2. Scroll to find the SSH root login command.
  3. Open your terminal or PuTTY and paste the command to connect.

Note: During installation, PasswordLab automatically sets up your database and stores credentials in a file located on your server. Keep those credentials safe — you’ll need them shortly.

Step 4: Final Configuration in the Browser

  1. Go back to the DigitalOcean interface.
  2. Click Quick access to PasswordLab to open the web setup wizard in a new tab.

Step 5: Complete Initial Setup

  1. Agree to Terms & Conditions.

  2. Enter License Key

    • Paste your valid PasswordLab license.
    • If you don’t have one, click Buy a new license.

  3. Enter Database Details

    • Use the database login shown in the terminal window.

  4. Enter SMTP Credentials

    • These credentials will be used for sending 2FA codes and email notifications.

  5. Create Administrator Account

    • Fill in the details to create the main admin account.
    • This account will be used to manage users and vaults.

  6. Verify Email OTP

    • Enter the one-time password sent to the admin’s email.

Step 6: Configure Vault Security (Shamir’s Secret Sharing)

  1. Enter five email addresses of trusted key-holders. Each will receive a piece of the master key.
    • You may use the same email for all, but it’s strongly recommended to use five separate emails.

Important:
You need at least 3 out of 5 key pieces to unlock the master vault.
Losing 3 or more pieces means permanent loss of access to all stored data. Treat them with care.

Step 7: Restart the Service

Once the configuration is complete:

  1. Return to your terminal.
  2. Restart the PasswordLab service:
sudo systemctl restart passwordlab
  1. Check service status:
sudo systemctl status passwordlab

If the status is active, your installation is complete.

Step 8: Access Your Vault

  1. Go to your browser window.
  2. Visit the PasswordLab server URL.
  3. You should now see the Vault Unlock Page.

Your PasswordLab server is now up and running!

What’s Next?

Need help? Reach out to support or check our growing knowledge base.

Let me know when you're ready with the next video or narration, and I’ll turn it into another clean step-by-step guide like this one.