01Password Vault
Company-wide passwords. Only you hold the key.
The password vault is built right into Draivix. Share logins for banks, government portals, online stores, and suppliers with your team without spreadsheets or sticky notes—and no one outside your company can read them. Not even us.
02How the vault protects passwords
Encryption that happens on your device
Your master password stays with you
Your browser derives the decryption key from your master password locally. The master password is never sent to the server.
The server holds only encrypted data
Passwords, notes, two-factor authentication codes, and custom fields are stored encrypted. Without the key from your browser, no one can read them.
Shared via keys, not chat
Each folder has its own key, encrypted individually for every authorized teammate. You never send passwords over email or chat.
Time-limited access
Shared access can have an expiration date. Once it expires or access is revoked, your teammate can no longer open the folder.
Two-factor authentication codes
Secret keys for one-time codes are stored encrypted, and the code is generated right in your browser. The server never sees the secret.
A log of every reveal
Every time someone views, copies, or shares a password—or has their access revoked—it is recorded in the vault audit log.
03How sharing works
Sharing a password, step by step
- 1
You save a password to a folder
Your browser encrypts the password with the folder key and sends only the encrypted content to the server.
- 2
You add a teammate
The folder key is encrypted with your teammate's public key. The server simply stores another lock, never the password itself.
- 3
Your teammate opens the password
Their browser unlocks the folder key using their own master password and decrypts the password locally on their device.
- 4
You revoke access
Your teammate's lock is removed and they can no longer open the folder. We recommend rotating any passwords they previously viewed.
Good to know
Entry titles, URLs, and usernames are stored unencrypted so you can search the vault. The sensitive content—passwords, notes, codes, and custom fields—is encrypted. If an administrator explicitly grants server-side automation access to a folder, the server can open that folder. This is a deliberate opt-in, never the default.
What this means for your business
- No more passwords in spreadsheetsPasswords no longer live in Excel, emails, or sticky notes. They are in one place and under control.
- Offboarding without panicWhen someone leaves, you know exactly which passwords they could access and which ones need to be changed.
- Vault in your browserYou can also access the vault through a browser extension, using the exact same local encryption on your device.
04Frequently asked questions
Frequently asked questions
Can you, as the provider, see our passwords?
No. Passwords are encrypted and decrypted in your browser. The server only holds encrypted data that is meaningless without your master password.
How do I share a password with a colleague?
You add your colleague to the folder. The system encrypts the folder key for them, and they unlock it using their own master password.
Who can see that someone viewed a password?
Vault administrators. Viewing, copying, sharing, and revoking access are all recorded in the vault audit log.
Can the vault also store two-factor authentication codes?
Yes. The secret key is stored encrypted and the one-time code is calculated directly in your browser.
05Other security areas
- Security overview Draivix runs on servers in the EU, every company has its own database, and every change or data export is logged. Here is how the system protects your data automatically.
Let’s start together
Tell us how your business works.
We will show you what a system that takes over part of that work could look like.
Book a consultation