The encrypted vault

The vault stores sensitive credentials securely. It is available on Starter and above.

Two modes

• Server-side vault encrypts values with AES-256-GCM. Ciphertext never leaves the server, and panels show metadata only until you reveal a secret.
• End-to-end encrypted vault is zero knowledge. Values are encrypted in your browser, so the server only ever stores ciphertext and a wrapped key.

Use access controls to decide who on your team can see each item.