Skip to main content
Connect an app whenever one is available: a connection is scoped, and you can cut it off. For an account with no app to connect, such as a supplier portal, a teammate uses a login kept in its vault.

​
Give it a login

1

It asks

When it needs a login, it sends the person who holds it a link. You can also just tell it which account it needs and who has the login.
2

You fill in the form

Open the link, signed in as yourself. The form asks for the username and password, or the API key. A login’s form also takes the key of an authenticator app, so two-step sign-in works without you.
3

It signs in

From then on it signs in by itself.
Please don’t send a password by email or message. If you do, it will use it if the work can’t wait, then ask you to change it and send you the link instead.

​
How it’s protected

Logins are encrypted with AES-256-GCM and never shown to anyone, the teammate included: it fills them in without seeing them, and a password is never written into anything it sends.

​
See or remove a login

Open the teammate’s Vault tab on the dashboard. It lists each login by name, and who it was asked of, never the values. Press Remove and it can no longer use it.