Shared vault folders
A shared vault folder holds passwords, keys and tokens the team uses together. Admins create them in Vault → + New shared folder, then add people with one of three levels:
| Access | What they can do |
|---|---|
| Use | Sign in to servers with these entries — without seeing the secrets |
| View | Also reveal and copy them |
| Edit | Also add, change and delete entries |
Open a shared folder and click its name to rename it, change who has access, or Delete folder.
How teams use it
- An admin creates "Production" in the vault and adds the database password.
- In a shared connection, the server signs in with that vault entry.
- Colleagues with Use access connect without ever seeing the password.
- When the password changes, update the one vault entry — every server using it follows.
Privacy
- Each person's Personal folder is theirs alone — admins can't open it.
- Viewing a secret needs a recent vault unlock, for everyone.
- If a shared entry is deleted or someone loses access, servers that used it stop connecting with a clear message — they never quietly fall back to another password.