# Vault

> The vault is the encrypted password store in CIRO NOISE for private and shared credentials. You reveal a password only after entering a code sent by email, and the vault then stays open on that device for 60 minutes.

- Page: https://www.ciro-noise.de/glossar/tresor
- Deutsche Fassung: https://www.ciro-noise.de/glossar/tresor.md

The vault holds the credentials your team shares: the Instagram account, the hosting provider, the wholesaler account. You'll find it in the navigation under "Passwords". Instead of sending passwords around in chat, you store them once in the vault and share them through roles.

The vault has two kinds of entries. Private entries belong only to the person who created them, and not even the organization's owner can see them. Shared entries and folders are visible to everyone whose role has the Team passwords permission.

## How the vault works in CIRO NOISE

Every entry is stored encrypted on the server, each with its own key. A copy of the database alone isn't enough to read a password. When you want to reveal a password, CIRO NOISE sends a six-digit code to your inbox. It's valid for 10 minutes.

Once you enter the right code, the vault stays open for 60 minutes, but only on the device and in the session where you entered it. After that it locks itself. After five wrong attempts the code expires and you request a new one, so nobody can try out codes.

## Permissions and protection

The vault uses the same roles as the wiki and tasks. If someone loses the role or leaves the organization, they stop seeing the shared entries at that very moment. The AI doesn't read the vault, and external AI tools and API keys can't reach it either.

## An everyday example

Mara from marketing needs the password for the Instagram account. She opens the "Marketing" folder, clicks "Reveal" and gets a code by email. For the rest of the hour she can reveal other passwords without requesting another code. When Jonas moves to sales and gets a role without the Team passwords permission, the shared entries disappear for him immediately.

## Frequently asked questions about Vault

### What is the vault in CIRO NOISE?

The vault is the encrypted password store in CIRO NOISE. It holds private entries that only their creator sees and shared entries made available through roles.

### How long does the password vault stay unlocked?

After the right code by email, the CIRO NOISE vault stays open for 60 minutes, only on that device and in that session. Then it locks itself.

### Can the AI access stored passwords?

No. Neither the AI in CIRO NOISE nor connected external AI tools or API keys can read the vault.

### What happens to passwords when someone leaves the team?

When a person loses their role or leaves the organization, they stop seeing the shared entries in the CIRO NOISE vault at that very moment.

## Related terms

- [One-time share](https://www.ciro-noise.de/en/glossary/one-time-share.md)
- [One-time code (OTP)](https://www.ciro-noise.de/en/glossary/one-time-code.md)

See the feature: https://www.ciro-noise.de/en/features/passwords.md

## CIRO NOISE at a glance

- CIRO NOISE is a workspace for small businesses and teams of up to about 50 people: wiki, tasks, customer requests, finance with quotes and invoices, customers (CRM), meetings, knowledge with AI, social media, password vault, and time tracking behind one login.
- Price: the first 2 seats are free, with every feature. Each additional seat costs €25 per month plus VAT. No credit card to start.
- Privacy: servers and AI run in EU data centers, content never trains AI models, and permissions apply per person and feature.
- AI connection: Claude and other AI assistants connect through MCP, the open standard for AI tools, with exactly the permissions of the person.
- Provider: CIRO GmbH, Eching, Germany. Contact: hello@ciro.gmbh, phone +49 89 24 88 31 22.