A password is one code away, not one click.

Store the logins no one person owns. Copying a username is instant; reading a password takes a code sent to email — or a director’s approval.

Vault is the shared-credential drawer for a business: the registrar, the tax portal, the client’s admin panel, the bank’s read-only viewer. Entries are searchable by everyone with access, but revealing a password requires a six-digit code emailed to the person asking — and on the entries that matter most, the code goes to the company’s directors instead.

Verification · sent to 2 directors

The vault

One list, searched live across website, address, username, registered email and notes — never the password. One-click copy for username, registered email, mobile and address. Categories you configure.

Reveal

A six-digit code to your own email, valid five minutes, buying a thirty-minute unlock. Signing out ends it immediately. Requests are limited to five a minute per person. On the live customer’s vault, virtually every entry uses the director-approval setting.

Management approval

Mark an entry "require management authentication" and the code goes to your directors and administrators rather than to the requester, who has to ask them for it. A stolen Ovvos session does not become a readable vault.

Files and the record

Attach licence keys and certificates up to 5 MB; they are encrypted before they are written, stored away from the public web, and downloading one needs the same verification as the password. Every change to a username, registered email or password is logged in plain English and emailed to the roles you choose — and the password itself is never in either.

The difference

Your most serious accounts need a person’s permission, not a mailbox.

Can Ovvos read our passwords?

Yes, in principle — and we would rather say so than pretend otherwise. Passwords are encrypted with the application’s key, not one derived from your own password, so this is not zero-knowledge encryption. What encryption at rest buys you is that a copy of the database is not a copy of your passwords. What the codes buy you is that a stolen session is not a readable vault.

What happens if someone’s Ovvos account is compromised?

They still cannot read a password without also reading that person’s email, because the code is sent there. On entries marked for management approval, they cannot read it even then — the code goes to your directors.

Do you record who looked at what?

We record every change — created, username changed, registered email changed, password changed — with who and when. We do not currently record who read a password.

Does this replace a consumer password manager?

No. There is no browser extension, autofill or phone app. Vault is for the logins that belong to the business rather than to a person, kept where your team already works.