When you share a Secret, Zoho Vault re-encrypts the Secret’s key with the recipient’s public key so they can decrypt it client-side. The recipient can log in via Vault’s browser extension or mobile app without the password ever appearing in plain text unless they explicitly choose to reveal it. Sharing can be done at the individual Secret level or by adding a user to a Chamber, which grants access to all Secrets within that Chamber.
Use Password Sharing when a colleague needs ongoing access to a shared service account such as a social media login, a billing portal, or a SaaS tool where individual accounts are not available. It replaces the unsafe practice of sending passwords over email or chat. Do not share Secrets with personal email addresses outside your organisation; instead, invite users to the Vault organisation first and then share with their corporate identity.
Sharing permissions are additive: a user with view-only access to a Secret cannot improve their own permissions. The owner of a Secret can revoke sharing at any time; the recipient will lose access on their next vault sync. In Enterprise plans, admins can restrict who is allowed to share Secrets outside a defined group. Sharing does not automatically notify the recipient; you may need to inform them separately. Review shared access periodically as part of your access-review cycle.
Only if the original owner granted share-forward permission. By default, sharing grants view or use access without the ability to re-share. Enterprise plan admins can enforce a policy that prevents any re-sharing, ensuring the credential owner always controls the full list of people with access.
When an account is deactivated in Zoho Vault, an admin or super admin can transfer ownership of that user’s Secrets to another active user. Until transfer is complete, recipients retain their existing access, but no one can update the Secret. This makes prompt ownership transfer critical during employee offboarding.
Aaxonix is a certified Zoho implementation partner based in Pune. Architecture-first, no surprises.