Vault Overview

Managing Vault Secrets

• Store sensitive notes and credentials in a dedicated vault.
• Share secrets only with teammates who need access.
• Removing a secret immediately revokes access for all assignees.

Encryption Awareness

Vault uses its own end-to-end encryption system, independent of organization-wide encryption. Each secret is encrypted with the key you provide when creating or updating it.

The Vault extension is always encrypted, regardless of whether the organization has end-to-end encryption enabled.

• You can use a unique key per secret or reuse a shared "master key."
• The key is required to reveal or update the secret value.
• If a key is lost, the secret cannot be decrypted.

Organization encryption settings do not affect Vault. Vault secrets are always encrypted with their dedicated keys.