AES-256 encryption
Sensitive values encrypted at rest.
Credentials Vault
A secure place to store the passwords, API keys, database credentials, certificates, and other secrets your team relies on. Every sensitive value is encrypted before it's stored, so only people you've granted access can see them.
- EncryptionAES-256
- TypesMultiple
- AccessPer credential
app.nautis.io/credentials
Built for
- Founders storing critical credentials safely
- Teams onboarding new engineers
- Operators with audit-grade secret rotation
Capabilities
What you can do with Credentials Vault
Everything ships out of the box. No setup, no plugins, no extra tools.
Multiple types
Passwords, API keys, database creds, certificates, free-form secrets.
Folders & search
Organize at scale and find by name or type.
Role gating
Only people with explicit access can read each credential.
List & cards view
Pick the layout that fits your workflow.
Quick start
From zero to using Credentials Vault
- 1
Click New credential
Sidebar → Profile & Company → Credentials Vault.
- 2
Pick the type
Password, API key, database, certificate.
- 3
Fill the secret
Stored encrypted from the moment you save.
- 4
Grant access
Pick teammates who can decrypt the value.
Credentials Vault questions
Who can see my credentials?+
Only you (the owner) and the teammates you've explicitly added under Shared Access. Members of your org without that share won't see the credential at all.
Can Nautis support staff read my passwords?+
No. Secret values are encrypted before they leave your browser-side request. They're decrypted only when an authorised user opens them in the UI.
What happens to shared credentials when a teammate leaves?+
When their account is removed from your organization, they lose access automatically. You may want to rotate the underlying secret as a precaution.
Can I export my credentials?+
Not directly — exporting bulk secrets in plain text would defeat the point of an encrypted vault. Copy individual values when you need them.
What's the difference between Client ID / Secret, API Key, and Token?+
They're all secrets, but each has its own form so the right labels show up. Pick the one that matches what your service calls it; if in doubt, use Other.
Can I recover a deleted credential?+
No. Delete is permanent — that's why Nautis asks you to confirm.
Is there a master password?+
Access is gated by Nautis auth + module permissions. Strong account security (2FA) is recommended.
How is the encryption key managed?+
Keys are managed inside Nautis with rotation. Sensitive metadata never leaves the encrypted boundary.
Your first hire, before your first hire
Hire your Chief of Staff today.
Full business context from the first conversation. Daily operations, fundraising, revenue and finance, run with you. You approve every move. It handles the rest.
Nothing leaves your workspace without your yes.