Sometimes someone outside the company needs access: the agency needs the hosting password, or a freelancer needs the login for the shop. A one-time share handles that without a password ending up in plain text in an email or chat.
You create the one-time share right on the vault entry with "Create one-time link". The recipient opens the link, sees the password a single time, and then the link is used up. They don't need a CIRO NOISE account for this.
How the one-time share works in CIRO NOISE
Anyone who can read the entry may create a one-time link. Because the link hands out a password, CIRO NOISE asks for the same email code as when revealing it. You choose how long the link is valid: one hour, 24 hours, seven days or 30 days. The default is 24 hours.
You can also set a PIN of 4 to 12 digits and give it to the recipient another way, such as by phone. With a PIN, the link doesn't even show which entry it's for until the right PIN is entered. After ten wrong PINs, CIRO NOISE locks the link for good.
Security
CIRO NOISE stores only a non-reversible fingerprint of the link, so a copy of the database reveals no open links. Every link created is logged. Once a link has been opened or has expired, it only shows that it's no longer valid.
An everyday example
The agency building the new website needs access to the hosting provider. Kira creates a one-time share valid for 24 hours with a PIN, sends the link by email and gives the PIN over the phone. The agency opens the link, copies the password, and the link is used up. After the project, Kira changes the password in the vault.