Team vaults

This page explains how Termius organizes shared access to infrastructure using vaults. It covers vault structure design, managing members and permissions, and moving data between vaults.

Overview

Team vaults are the top-level organizational unit in Termius. A vault stores data and controls which team members can access it.

Each vault is encrypted with a unique key. Members can access a vault only after the owner grants them permissions.

To start collaborating in Termius invite your team members. Learn more in Team Management.

Termius includes one non-shared Personal vault per user, and one default Team vault shared with all team members. Additional custom team vaults can be created and shared with specific team members.

Members can have different permissions in different vaults:

• Can edit: Allows creating, updating, and deleting data within the vault; adding or removing members.
• Can view: Allows viewing data, initiating connections to hosts, and running snippets. Data cannot be modified.

Create vaults

Define the vault structure

Whether you separate access by projects, clients, environments, departments, or other criteria, vaults can be configured for that use case.

A few examples of how different teams organize their data using vaults:

Small startup

The team structure is flat, with a small number of members and a high level of trust.

• Vaults: A single Team vault shared with all members
• Groups: Prod, Staging, and Development

Consulting company

Mid-size Business

Enterprise

Add custom team vaults

Desktop

1. To create a new vault, you have several options:

   1. Open Settings > Vaults > Add vault

      
   2. Click the chevron on the Vault tab and click Add vault

      
   3. Click the Vault selector on the entity edit form and click Add vault

      
2. Name it according to your vault structure

   
3. Add members to this vault and set their roles

   
4. Click Save changes

Add data to vaults

Desktop

1. To add data to a vault, you have several options:

   1. Open entity details and click the vault selector to choose the vault to move it to

      
   2. Right-click on an entity you want to move or copy, then select Move to or Copy to and select the destination vault

      
2. Choose where you want to store credentials for hosts and groups

   

• Personal vault — the host or group will be added to a vault without credentials. Each member will need to use their own set of credentials saved in their Personal vault
• Selected vault — the host will be added to a vault with credentials. Each member will connect using the same shared credentials. Once the entity is saved to this vault, it is instantly accessible by all team members with access

1. Once an entity is moved or copied, it is immediately available to all members of the selected vault

If the selected entities have linked entities, choose how to handle them:

• Copy — all linked entities are copied to the selected vault and also remain in the original vault
• Move — all linked entities are moved to the selected vault, removed from the original vault, and unlinked from all other entities in the original vault

Edit vaults

Change vault name

Desktop

1. Open Settings > Vaults , or click the chevron on the Vault tab and click Manage vaults

   
2. Select a vault you want to edit. Personal and Team vaults have default names that can't be changed

   
3. Click on the vault name and change it
4. Click Save changes

Add members

Desktop

1. Open Settings > Vaults , or click the chevron on the Vault tab and click Manage vaults

   
2. Select a vault you want to edit

   
3. Add team members to this vault from your team and set their roles

   
4. Click Save changes

Change member permissions

Desktop

1. Open Settings > Vaults , or click the chevron on the Vault tab and click Manage vaults

   
2. Select a vault you want to edit

   
3. Click the permission picker for the member you want to edit:

   1. Can edit allows the member to edit entities in the vault
   2. Can view allows the member to connect and run snippets, but not edit them
   3. Remove access allows removing a member from the vault

   
4. Click Save changes

Account management portal

Remove member from vault

Desktop

1. Open Settings > Vaults , or click the chevron on the Vault tab and click Manage vaults

   
2. Select a vault you want to edit

   
3. Click the permission picker for the member you want to remove and select remove access

   
4. Save changes

Security

Vaults are the most secure way to share sensitive information across the team. Each vault is encrypted with a unique key, so only you and your team members with access to that vault can see and use its data.

New members cannot access a vault until the owner grants access and sets their permissions.

For more information about encryption and security, see Encryption overview.