Configurations To Improve Application Performance

Password Server is an easy-to-use application that has grown in flexibility, stability, with powerful features and integrations. The addition of many new features has added some sophistication to an otherwise simple application.

With this added ability has come new configuration, new possibilities, and potential to speed-up or slow down the access your users will be expecting.

Here is a list of setup configuration, usage, and environmental factors that may enhance the performance of your implementation.

Browse the Questions & Categories below for improvements which best match your concerns or interest.

Focusing Questions

  1. KeePass
    • Why is loading the Web client faster than KeePass for Pleasant?
      • The KeePass for Pleasant & Mobile clients loads folder & entry information at login time, so that future browsing and searching is quick. Only passwords are loaded as-needed.
      • Web browser client loads small amounts of information as it is needed, and so future searching and retrievals will also request information from the server at that time.
    • Why is the KeePass for Pleasant take longer than standard KeePass?
      • Additional User Management, Features, & Security that handles multiple users and roles,
      • Interaction with a centralized server & database across a network,
      • Added volume of information included in the password server database,...
      • ... along with strong Encryption & Decryption of information, all require significant processing and consumes server CPU and RAM.
    • Why is the KeePass for Pleasant search longer than the web client?
      • By default this option should be turned off: "Search for passwords in Quick Search".
        • It is found in Tools > Options > Interface > Quick Search (Toolbar).
    • Why does Auto-Type take awhile, when KeePass has been opened for awhile?
      • The KeePass for Pleasant application may have a short timeout which can be increased in the Timeout Policy
    • Having passwords be displayed as plain text can cause slowdown
      • To set this option open the Keepass Client - Tools > Options > Policy > check/uncheck "Unhide Passwords*"
        • There's also an option under Interface > Advanced > check/uncheck "Require Password repitition only when hiding using asteriks is enabled"
  2. AD/LDAP
    • How large is your Directory and how spread out are the users and groups?
      • see recommendations: AD/LDAP structure (section below)
    • Do you have Directory syncing enabled? How often is this scheduled?
  3. Database
    • Are you using the default database or an upgraded database (e.g. MS-SQL, Postgres, Azure)
      • Updating to one of these will help handling larger installations
      • see: Upgrade the Database (section below)
  4. Amount of Data
  5. Folder Tree
  6. Admin Users / Regular Users
    • Are your Administrators able to login and navigate through the application at the same speed as your regular users?
      • We encourage administrative users with accounts that have access to a large amount of entries (> 20,000) to use Web Admin client when possible
      • Admin usage of KeePass for the desktop with very large databases (e.g. > 5,000 users) is not yet well supported. But in the future there will be an option to Load On Demand in this client as well.
      • see section below: Limit user access
  7. Duration
    • How long does it take to login? How long do other operations take?
  8. Server
    • Does your Server still meet the Hardware Requirements?
    • Sometimes it is tempting to add many different kinds of processes on the same Server. Is this case with your Server, or is the process isolated on your Server / VM?
  9. Network
    • How sophisticated is your network? Is there a difference if you run the applications locally on the Password Server, or if you login remotely or through a VPN?
      • Using the web client may be more performant in this situation

Configuration Improvements

Keep Software Updated
Increase Logging Details: Server, Performance, & KeePass
Folder Structure
Change Starting Folders

(Enterprise+)

Limit User access
Cleanup Old Entries
Attachments
LDAP/AD Directory Structures

Active Directory itself is self-tuning and so should not require performance tuning. However, there are some structure/setup configurations on AD or in Password Server that are helpful.

Upgrade the Database
Limit Long-Running Processes
Change your Policy Timeouts
Dedicated Server
Anti-Virus Scanning
Use IIS Hosting
Disable Extra IIS Logging

Please let Support know if you need further assistance or for additional comments/questions.

We are very interested in knowing your results!