Teams
Share servers without a shared spreadsheet.
Share hosts and credentials with your team in an encrypted vault instead of a spreadsheet. Team membership is owner, admin or member; vault roles are owner, admin, editor and viewer. Invite sets a vault role (default editor): editors can change hosts, viewers can only use them. Team vaults work in the desktop app on Windows, macOS and Linux.
01
Two vaults, one window
Your personal vault stays yours. A team vault sits next to it in the switcher, and you hop between them without signing in again. Hosts, groups, tags, credentials and snippets belong to whichever vault you created them in.
- A personal vault no team can see
- One or more shared vaults per team
- Switch vaults without reconnecting or signing in again
02
Team role and vault role are separate
Team membership is owner, admin or member, and it decides who can invite people, remove them or hand over ownership. Vault roles are owner, admin, editor and viewer. When you invite someone, you set their vault role, which defaults to editor. Editors can change hosts; viewers can only use them. Team vaults work in the desktop app on Windows, macOS and Linux.
“Managing the team and writing to a vault are two different permissions.”
03
Still end-to-end encrypted
Sharing doesn't hand the key to the server. A team vault is encrypted on the devices of the people using it, and the sync service stores records it can't read, index or search.
- Records sync one by one, not as one big blob
- Deletions sync too, so every device ends up with the same list
- Remove someone and they lose access to future changes
FAQ
Frequently asked questions
Can the server read a team vault?
No. It stores encrypted records and never has the key. Merging happens on your device, because only your device can see what changed.
What happens when someone leaves the team?
Remove them from the team and they stop getting the vault. Anything they already had, assume they know it and rotate it, just like with any other offboarding.
Do I need a team to use Ravelon?
No. A personal vault on one device is the free version and doesn't need an account at all.
Get started
Try it in your own workspace.
On one device the desktop app is free, with nothing held back: the encrypted vault, terminal, SFTP and the assistant are all included.
What else Ravelon can do
Vault & sync
Encrypted on your device before it syncs, and every new device needs your OK.
Self hosted sync
Run the sync server yourself, inside your own network.
For companies
Machine policy, company proxies, diagnostic logs and packages for rollout.
Import & export
Bring hosts from ssh_config, PuTTY, MobaXterm or CSV, and take them with you.