Vault

A place on your account to keep API keys, SFTP logins, and other credentials, and exactly what its encryption promises.

Your account2 min read

On this page
  1. What the encryption means
  2. Adding an entry
  3. Revealing a secret
  4. Removing an entry
  5. Related

The vault holds credentials on your Clouduxe account: API keys, SFTP logins, root passwords, anything you would otherwise keep in a note on your desktop. You store an entry once and reveal it when you need it.

AccountVault

What the encryption means

Read this before you put anything in.

Secrets are sent to be stored encrypted, and are decrypted when you ask for one, on an authenticated request tied to your account. The decryption happens on the server, not in your browser, and there is no separate vault passphrase, so this is not end-to-end encryption. Any signed-in session on your account can reveal any entry, which is why two-factor authentication matters more once you start using the vault.

Your browserAny session signed into your accountThe serverDecrypts the secrethere, not in yourbrowserThe vault entryStored encryptedRevealThe valueEncryptedNo vault passphraseAny session signed in to your account canreveal any entry.Store only what you already share with usKeep anything nobody here should read in yourown password manager.Your browserAny session signed in to your accountThe serverDecrypts the secret here, not in your browserThe vault entryStored encryptedRevealThe valueEncryptedNo vault passphraseAny session signed in to your account canreveal any entry.Store only what you already share with usKeep anything nobody here should read in yourown password manager.
Where a secret is decrypted. Reveal is a request from whichever session is signed in, and the server decrypts the entry and sends the value back, so the decryption never happens in your browser. With no vault passphrase, your sign-in is the only lock. Illustration.

Adding an entry

Choose Add entry. The dialog Add a vault entry takes two fields, both required:

  • Name, what the entry is, for example "Production database password". This is the only part shown in the list, so name it for what it opens.
  • Secret, the value itself.

Choose Save. The entry appears in the list with the date it was added, and the panel confirms with "Vault entry saved."

Revealing a secret

Choose Reveal on the entry. The Vault secret dialog fetches the value and shows it as bullets until you choose Show. Copy puts it on your clipboard, and Done closes the dialog, which clears the value from the page.

The Vault secret dialog after Reveal. The value stays as bullets until Show; Copy works either way, and Done is the only way out that the footer offers. Example view.

Each reveal fetches the secret again, and closing the dialog clears it from the page, so the value is not held there between two reveals.

Removing an entry

Use the trash button on the entry. The dialog Delete vault entry? names what is going, and confirming with Yes, remove deletes it.

Need a server, or a hand with one?

Pick a plan to deploy a server, or open a ticket in the panel. Support runs 24/7/365.