Skip to content
Secrets Manager.
Open menu

For agencies

One vault per client. Onboard and offboard without the scramble.

Social logins, ad accounts, analytics, and CMS — organized by client, shared with the people working on them, pulled back when the engagement ends.

Talk to usHow it works
A typical itemLogin

Meta Business Suite

shared social login

Value

hidden value

Synthetic example. The values above do not open anything.

Why they use it

Agencies

An agency holds more logins than any other kind of team, for clients that change hands often. One vault per client keeps that project's credentials together, and offboarding becomes a membership change instead of a hunt through direct messages.

One vault per client

Everything for that client in one place: logins, cards, notes. Shared with the team that runs the account.

Clean exit

Whoever leaves the account leaves the vault. No orphaned access dragging on for months after the last invoice.

Reveal instead of send

Each person reveals and copies what they need. The password stops circulating as a forwarded email.

How they manage secrets

  1. Create a vault named for the client.

  2. Add the social, ads, analytics, and CMS logins, with the address for each one.

  3. Share it with the account team; freelancers come in as members, without managing it.

  4. Rotate shared logins on a schedule; health shows you the weak ones first.

  5. When the engagement ends, remove the members and hand over.

Typical items

  • Login

    Meta Business Suite

    shared social login

    hidden value
  • Login

    Google Analytics

    with TOTP

    hidden value
  • API key

    Mailchimp API

    for the newsletter integration

    hidden value

Questions

Can a client see their own vault?

They can: sharing is per vault and per person, so a client contact comes in as a member. External guest roles, with fewer permissions still, are on the roadmap.

What about handover at the end?

Ownership is per vault. Today handover is a change of owner and members; a formal export of a whole vault is on the roadmap.

Do freelancers end up with full access?

No. The member role uses the items but does not manage the vault or invite anyone — that stays with the admin and the owner.