Rebecca PY Hexnode has extended its Local Administrator Password Solution (LAPS) to macOS, enabling centralized credential security across Windows and Apple environments. The move enhances enterprise endpoint protection through automated password governance and advanced access controls.
MALAYSIA, 3 APRIL 2026 – Hexnode has announced the expansion of its Local Administrator Password Solution (LAPS) to macOS, marking a significant step in strengthening cross-platform endpoint security. Managed centrally through the Hexnode Unified Endpoint Management (UEM) console, the enhanced solution now provides enterprise-grade protection for local administrator credentials across both Windows and macOS environments.
The latest update addresses long-standing security challenges associated with static credentials, fragmented account management, and reliance on directory-based access models. By introducing unique, securely vaulted credentials for every endpoint, Hexnode LAPS helps reduce the risk of lateral movement within corporate networks, a common vulnerability in large-scale IT infrastructures.
As organizations continue to scale their device fleets, static administrator passwords have increasingly become a critical weak point in endpoint security. Hexnode LAPS tackles this issue by automating password rotation and enabling IT teams to enforce consistent password policies across all devices. Unlike traditional LAPS tools that depend heavily on directory synchronization, the solution operates independently, allowing administrators to securely retrieve credentials directly from the UEM console—even when devices are off-domain or temporarily disconnected.
The platform also enhances compliance and audit readiness by allowing organizations to define password retention policies. This ensures a balance between maintaining audit trails and minimizing exposure risks, while reducing the operational burden on IT teams through policy-driven automation.
Beyond credential management, Hexnode LAPS introduces scalable governance for multiple local administrator accounts. This allows organizations to manage not only default administrator accounts but also those assigned to contractors or specialized roles. The system can automatically create and configure administrator accounts on new or reset devices, ensuring seamless onboarding without compromising security.
Additional safeguards include automatic disabling of inactive administrator accounts and immediate password rotation after credentials are accessed. These measures significantly limit the window of vulnerability and strengthen overall access control.
With this expansion, Hexnode reinforces its commitment to delivering practical, scalable security solutions that combine centralized control, operational efficiency, and cross-platform compatibility in increasingly complex enterprise environments.