The encrypted Vault
Storing credentials and secrets with per-item access.
The Vault stores credentials, API tokens, and secrets encrypted with AES-256-GCM. Secret values never leave the server unencrypted until you reveal them.
Unlock the Vault with your account password or a passkey. It locks itself after 5 minutes of inactivity. Every reveal is recorded in the audit trail.
Items can be shared with specific teammates. each person unlocks with their own credentials. The built-in generator creates strong passwords and passphrases.
The Vault is a premium module for Pro workspaces.
Access history. Each secret shows who last opened or changed it. Click that line for the recent trail. Every reveal is recorded, so sensitive values are never read silently.
Lock warning. The unlock timer turns amber during the final minute before the vault re-locks, so a reveal never gets cut off mid-task.