CRM-NG

Documentation Vault

Shared credentials without the shared spreadsheet.

Encrypted passwords and sign-in codes for every client, revealed only to the right people, with every look recorded.

Join the betaBack to Documentation Vault
A client's passwords, masked, with categories and links to the systems they open.
A client's passwords, masked, with categories and links to the systems they open.

Why it matters

Client admin passwords get pasted into chat, kept in a spreadsheet anyone can copy, or remembered by one person. When a technician leaves you cannot tell what they had access to, and when a client asks who used their firewall login, you have no answer.

Passwords and access in detail

  • Encrypted at rest

    The password, its notes and any one-time-code seed are encrypted before they are stored.

    • Unreadable without the vault key
    • Secret fields on items encrypted the same way
    • Files attached to passwords encrypted too

  • Reveal with proof

    Seeing a password takes a deliberate step and leaves a record.

    • Confirm your own password to reveal
    • Masked again after 30 seconds
    • Every reveal written to the audit trail

  • One-time codes

    Store the seed for an account protected by an authenticator app, and generate its current code when you need it.

    • Codes generated on demand
    • No shared phone in a drawer

  • Who sees what

    Access is limited per company and, for the most sensitive credentials, to administrators.

    • Staff open only their assigned companies
    • Sensitive passwords for Vault administrators only
    • Delete reserved for administrators; archive for everyone who can edit

See it in action

"Who can open this vault": the people with access to this client's records, with changes audited.
"Who can open this vault": the people with access to this client's records, with changes audited.

Questions

Can an administrator export every password?

Only an administrator, only after confirming their own password, and the export is recorded in the audit trail. Ordinary exports mask secrets.

What happens when a technician leaves?

Remove them from the vaults they could open. The audit trail still shows which credentials they revealed, so you know which ones to change.

Can we see who revealed a password?

Yes. Each reveal is audited, and the company's Activity section lists vault events newest first.

More about Documentation Vault

See Documentation Vault running on your own data.

Every module runs on CRM-NextGen Cloud: we set it up and run it for you. Beta members get the first invites and hear pricing first.

Join the beta