Founders storing critical credentials safely
Credentials Vault
A secure place to store the passwords, API keys, database credentials, certificates, and other secrets your team relies on. Every sensitive value is encrypted before it's stored, so only people you've granted access can see them.
Encryption:AES-256Types:MultipleAccess:Per credential
Credentials Vault
AES-256 · Unlocked
AWS Production
API Key
Stripe Live
API Key
Postgres · Prod
Database
Cert · *.nautis.io
Certificate
Built for
Who uses Credentials Vault
Teams onboarding new engineers
Operators with audit-grade secret rotation
Capabilities
What you can do
Each capability ships out of the box — no setup, no plugins, no extra tools.
AES-256 encryption
Sensitive values encrypted at rest.
Multiple types
Passwords, API keys, database creds, certificates, free-form secrets.
Folders & search
Organize at scale and find by name or type.
Role gating
Only people with explicit access can read each credential.
List & cards view
Pick the layout that fits your workflow.
Quick start
From zero to using Credentials Vault
- 1
Click New credential
Sidebar → Profile & Company → Credentials Vault.
- 2
Pick the type
Password, API key, database, certificate.
- 3
Fill the secret
Stored encrypted from the moment you save.
- 4
Grant access
Pick teammates who can decrypt the value.
Encryption
AES-256
Types
Multiple
Access
Per credential
FAQ
Credentials Vault questions
Who can see my credentials?
Only you (the owner) and the teammates you've explicitly added under Shared Access. Members of your org without that share won't see the credential at all.
Can Nautis support staff read my passwords?
No. Secret values are encrypted before they leave your browser-side request. They're decrypted only when an authorised user opens them in the UI.
What happens to shared credentials when a teammate leaves?
When their account is removed from your organization, they lose access automatically. You may want to rotate the underlying secret as a precaution.
Can I export my credentials?
Not directly — exporting bulk secrets in plain text would defeat the point of an encrypted vault. Copy individual values when you need them.
What's the difference between Client ID / Secret, API Key, and Token?
They're all secrets, but each has its own form so the right labels show up. Pick the one that matches what your service calls it; if in doubt, use Other.
Can I recover a deleted credential?
No. Delete is permanent — that's why Nautis asks you to confirm.
Is there a master password?
Access is gated by Nautis auth + module permissions. Strong account security (2FA) is recommended.
How is the encryption key managed?
Keys are managed inside Nautis with rotation. Sensitive metadata never leaves the encrypted boundary.
Better together
Related modules
Try Credentials Vault inside Nautis
One workspace, one bill, one source of truth. Skip the tool stack.