Secure Credential Sharing, Simplified
Grant controlled, time-bound access to credentials without ever exposing the underlying secrets.
Security Foundation
Built from the ground up with security as the core principle—not an afterthought.
AES-256 Encryption
Shares are encrypted with military-grade AES-256, and each one expires on the schedule you set, from 1 hour to 3 months.
KMS Key Protection
Keys for server-side encryption are held in a managed key service under role-based access, never in plain text. Shares created on the web are encrypted in your browser, so their key never reaches us at all.
Automatic Record Scrubbing
Access to an expired or fully-viewed share stops immediately. The record itself is deleted from the live database shortly afterwards, usually within the hour.
Ciphertext-Only Backups
Encrypted database backups are held for a short operational window, and they hold only ciphertext. Without the key from your link, nobody — including us — can recover the contents.
Access Controls
Fine-grained control over how, when, and by whom your credentials can be accessed.
Time-Based Expiration
Set links to expire after minutes, hours, or days. Access automatically revokes.
View Count Limits
Links auto-expire after a configurable number of views. One-time access or more.
Password Protection
Add a secondary password to unlock shares for an extra layer of security.
Secure View
Clean, secure interface for recipients. No login required to view credentials.
Timed View
Enforces the display of credentials for a limited time. Once the timer expires the credential can no longer be viewed, and the record is deleted from the live database shortly afterwards, usually within the hour.
Logged View
Requires recipients to be logged in to CredenShare before they can view Secure Shares. Adds an additional layer of identity verification.
Sharing Features
Custom Fields
Add multiple fields per share: username, password, URL, SSH keys, notes, and more. Link fields open in a new tab, QR code fields (Wi-Fi included) scan from a phone, and password fields can generate a password, passphrase or PIN.
Activity Emails
Get an email when a share is opened, someone is refused access, it expires, or someone else deletes it. Each event is off until you tick it when you create the share in the web app or the browser extension.
Access Logs
Full audit trail: who accessed what, when, and from where. Link scanners and automated clients are labelled, so a preview is easy to tell from a person. Retention runs from 3 days on Solo to 180 days on Enterprise.
Slack Integration
Share credentials directly from Slack with /credenshare commands.
API Generation
Create secure shares programmatically. Automate credential distribution at scale.
Custom Branding
Your logo, colors, and custom domain on share pages. White-label for clients.
Multi-User Teams
Team-based collaboration with shared workspaces and role-based permissions.
Credential Collection
Need credentials from someone? Send a SecureRequest link instead of asking over email. They fill a secure form, you get notified—encrypted end to end.
Built for Security
Advanced controls
Included with Business and Enterprise plans.
Secure Share Templates
Reusable field templates for common credential types (SSH, AWS, Database, etc.).
Business Branding
Advanced white-label customization for enterprise deployments.
IP-Based Access Control
Limit access to Secure Shares only to recipients within specific IP address ranges. Perfect for enterprise network restrictions.
Frequently Asked Questions
Ready to Stop Sharing Passwords Insecurely?
Join teams who trust CredenShare for secure credential access.