'%20stroke='url(%23em)'/%3e%3cellipse%20cx='30'%20cy='34'%20rx='26'%20ry='20'%20fill='url(%23gm)'/%3e%3cpath%20d='M12.5%2013.00L52.5%2021.74L52.5%2024.33L12.5%2017.60Z'%20fill='url(%23lm)'/%3e%3crect%20x='14.20'%20y='19.29'%20width='6.60'%20height='28.93'%20rx='1.45'%20fill='url(%23cm0)'/%3e%3crect%20x='27.00'%20y='21.24'%20width='5.60'%20height='24.81'%20rx='1.23'%20fill='url(%23cm1)'/%3e%3crect%20x='37.60'%20y='22.85'%20width='4.70'%20height='21.42'%20rx='1.03'%20fill='url(%23cm2)'/%3e%3crect%20x='46.60'%20y='24.22'%20width='4.00'%20height='18.53'%20rx='0.88'%20fill='url(%23cm3)'/%3e%3cpath%20d='M12.5%2050.00L52.5%2042.57L52.5%2044.26L12.5%2053.00Z'%20fill='%237fa3ff'%20opacity='.75'/%3e%3c/svg%3e)
PorticolShared secrets
Share secret values with your team, encrypted on your devices, so the server holds nothing it can open.
- Each desktop has its own key pair in the keychain. A new device is approved by code from one you already use.
- Values are encrypted on the desktop before they sync. The server stores public keys, wrapped keys and ciphertext.
- You make a recovery key before your first shared secret: a value that no device or recovery key holds is lost for good, and Porticol cannot recover it.
- When a member leaves or a device is signed out, the workspace's keys are replaced.
- Variables can also read from HashiCorp Vault, AWS Secrets Manager, Azure Key Vault and Google Secret Manager, on your device when you send.
Plans
- Shared secrets is in Team, Business and Enterprise.