A zero-knowledge vault where your team can securely share passwords, API keys, SSH keys and credentials — with individual accounts, role-based access and a complete audit trail. Not a shared login. A proper team vault.
Zero-knowledge sharing — no one gets access to secrets they shouldn't have.
Set up a vault for your team. Add members with appropriate roles — Admin, Member or Read-only.
Store passwords, API keys, SSH keys, recovery codes and notes. Each item is encrypted in your browser before being stored.
Authorised members fetch the encrypted items and decrypt them in their browser. The server never sees plaintext.
Every view, copy, edit and deletion is logged. See who accessed what and when — at any time.
Website credentials, admin accounts, shared service logins.
Stripe, AWS, GitHub, Twilio, OpenAI — any API key.
Server access keys with hostname and passphrase.
Shared 2FA seeds for team accounts.
Backup codes for shared accounts.
Encrypted free-text for deployment notes, runbooks, secrets.
When you share a secret with a team member, the item is encrypted so that any authorised member can decrypt it using their own vault key. Each team member has their own account and their own vault key — they do not share a master password.
SealedKeys supports Admin (full access including member management), Member (read and write access to vault items) and Read-only (can view and copy but not edit or delete). Contractors are typically given Read-only access.
Remove their account from the organisation. From that point, they can no longer access the vault. The audit log shows which items they accessed — so you know which credentials to rotate as part of offboarding.
The free plan supports up to 3 members per organisation. The Pro plan at £3.49/user/month supports unlimited members.
Yes. You can create multiple organisations within SealedKeys — for example, one for engineering, one for operations and one for contractors — each with separate member lists and access controls.
25 items free. Up to 3 team members. No credit card required.