LAPSlock

LAPSlock retrieves Windows LAPS local administrator passwords and BitLocker recovery keys from Microsoft Entra ID and Intune — at the helpdesk bench, in the server room, and everywhere the admin center is not. BUILT FOR PEOPLE WHO ARE PAID TO BE SUSPICIOUS • Your sign-in, not ours. LAPSlock uses Microsoft delegated authentication. It can only read what your account can already read, and every retrieval lands in your own tenant's audit log exactly as it would from the admin center. • No vendor server in the credential path. Passwords travel from Microsoft Graph to your device over TLS. Kainor never sees them and has no way to. • Nothing collected. No analytics, no telemetry, no crash reporting, no account to create. The app talks to Microsoft and, only if your organization activates a license, to one license endpoint that receives your tenant ID and nothing else. • Verifiable, not just…