A shared SSH vault for teams
Team and Business give your team a shared, end-to-end encrypted SSH vault: the same servers and keys for everyone, managed by the owner.
Groups2
0 servers1 server2 serversServers2
deploy@10.20.0.11Productionredis@cache-eu.internaldeploy@10.20.0.40ProductionDuring an incident, nobody can find the address or the key
Today
Servers sort by environment and filter as you type, and Cmd+K finds any of them. A label shows which session is production, and risky commands ask first.
With a shared vault
One Team vault, so everyone on call has the same list.
People join the team and people leave
Today
Invite by email, assign roles and manage seats from your account area.
With a shared vault
Access is granted in the app once you have typed the groups of the key fingerprint the person reads you.
Credentials get copied around and nobody can check them
Today
Keys and passwords live in an encrypted vault, not in notes or chat. The key check points out weak key types and keys reused on many servers.
With a shared vault
Business adds a read-only permission for each vault.
Roles and permissions
| Roles and permissions | Team | Business |
|---|---|---|
| Shared vaults | One Team vault | Several vaults |
| Permissions | Everyone in the team can edit | Can edit or Can view, for each person and each vault |
| Owner | Invites people, manages seats and pays | Invites people, decides who is in each vault, manages seats and pays |
| Two-factor sign-in | The owner can require it for the team | The owner can require it for the team |
| Minimum people | 2 | 2 |
When someone joins
Invite by email
The owner invites from the app or the account area. An invite that needs a new seat asks you to add it first.
Compare the key
Before access is given, the new person reads you a few groups of their fingerprint and you type them in the app.
Give access in the app
Access is given with the keys on the device.
When someone leaves
Remove the person
In the app or the account area. They stop receiving anything at once.
New keys
Each vault they could open gets a new key and is encrypted again for the people who stay.
Change what they knew
Change the passwords and keys they knew on the servers.
Try it on one server first
Buy Team or Business at once, with a full refund within 14 days. Questions about your team? Write to us.