An encrypted vault for passwords, OTP codes and tokens. Share a credential with an agent only when it needs one, for only as long as it needs it — with every access logged and revocable in one click.
Live product The vault splits cleanly into two first-class worlds: "Granted to you" — every credential and card the company has assigned you — and "Your vault," your own private secrets. They never blend into one list, and a single search reaches across both. No other password manager separates company-assigned from personal this way.
Live product Share a credential with a specific agent or person, scoped to a purpose and a time window. When the window closes, access auto-revokes — no stale grants, no forgotten keys.
Live product Assign a company card to a person or agent and they can pay with it — but the card number is never transmitted to their screen at all. It is fill-only and audited per use, with the owner notified on every charge. Revoke or rotate at any moment as the remedy. Other managers show the recipient the full card; we structurally never reveal it.
Live product OTP codes live in the vault and autofill at the OS layer through the Plantel Browser — a native autofill provider, not a fragile extension — or approve on your phone with biometric push-approval. Agents and humans get through 2FA without copy-pasting.
Live product Each time a credential is used, it is logged to a tamper-evident, tenant-scoped audit trail — who, what, when, and why — alongside the rest of Plantel. And on every granted fill, the credential owner gets a per-use notification, so no secret is ever used silently.
Live product Least privilege is only real if revoke has teeth and a share can’t be mis-addressed. Here is how the vault enforces that.
There is no free-text email field. Every recipient is resolved from your tenant’s member roster, so a secret can’t be mis-addressed to an outside address — ever. All three major password managers let you share to an arbitrary email; we don’t allow it by design.
A grant points at the credential; it never duplicates or discloses it. Revoke instantly kills the recipient’s ability to decrypt — there’s no stray copy left behind in a shared folder to clean up.
Grant lifetime is tied to org membership at the database layer: a foreign-key cascade, an owner-edge integrity check, and a membership-deletion trigger as a backstop. When someone leaves the company, their access is gone — not pending a cleanup job.
Each granted credential or card fires a notification to its owner on every use — a bell with a deep link to the exact item. No password manager we benchmark notifies the sharer per use.
Credential health — weak, reused, stale — is evaluated locally, with no external lookups. Other managers’ dashboards phone out to do this; ours never leaves your tenant.
Passwords, OTP codes, tokens and cards are encrypted at rest with AES-256-GCM. We’re plain about where convenience crypto ends and end-to-end begins, rather than over-claiming — security you can audit, not just trust.
Encrypted, least-privilege, auto-revoking, fully audited — in every seat.
