FastPass SSPR vs PWM
FastPass SSPR
fastpasscorp.comPWM
github.comSide by side
| Figure | FastPass SSPR | PWM |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| Linux | — | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Self-Service Password Reset Software | 7.8 (#8) | 7.3 (#11) |
| Deployment | FastPass SSPR is available as a cloud or on-premises solution, and service providers can operate a multi-tenant cloud deployment. | PWM is distributed as a Java WAR, an executable Java JAR with embedded Tomcat, or a Docker image. |
| Purpose | FastPass SSPR lets end users reset passwords and unlock accounts without contacting the IT help desk. | PWM is an open source password self-service application for LDAP directories. |
| Security controls | Password reset protections include IP address checks, CAPTCHA, Active Directory status and group checks, failed-attempt account locking, and session monitoring. | Configurable password policies include syntax and regex rules, dictionary enforcement, remote REST checking, and shared password history. |
Plans
In their own words
FastPass SSPR
FastPass SSPR has no write-up on Specifiction yet; its figures are above.
PWM
PWM is a free, open-source password self-service application for LDAP directories. Its web configuration manager exposes more than 500 settings and lets administrators import or export configuration as one file. During password changes, rules are enforced while users type and password-strength feedback is shown. Forgotten-password verification can use email or SMS tokens, TOTP, remote REST, OAuth, or LDAP attributes. Listed directory support includes Generic LDAP, 389 Directory Server, NetIQ eDirectory, Microsoft Active Directory, and OpenLDAP. Authentication options include Basic Authentication, HTTP-header username injection, CAS, and OAuth client single sign-on. REST APIs cover password setting, recovery, policy reading and verification, and user-attribute updates. PWM is distributed as a Java WAR, an executable Java JAR with embedded Tomcat, or a Docker image. The version table lists Java 17 for PWM 2.1 and Java 11–17 for PWM 2.0. Configurable policies include syntax and regex rules, dictionary enforcement, remote REST checks, and shared password history. The listed plan is free.