Credential Manager

The Credential Manager keeps account logins (for example GitHub, Gmail, Microsoft, GitLab, Azure, AWS, hosting or database accounts) in one protected place. The account type is only a label: nothing here signs in to those services for you.

Personals and Shared

• Personals are credentials you own. Nobody else can see them, including administrators and your teammates.
• Shared lists credentials someone has shared with you, one person at a time. Shared credentials are view-only unless the owner also allowed editing. You cannot delete, re-share or transfer them.

Adding and editing

Use Add credential and fill in the account type, username, email, password, whether 2FA is on, and a note. The "last modified" date is set by the system. When you edit, the password box starts empty; leave it empty to keep the current password. Two-factor seeds and recovery codes are not stored: "2FA enabled" is only a yes/no label.

The table

Search and filter by account type, username, email or note, sort any column, and page through results. Passwords are always shown as ••••••••. Passwords are never part of what is searched.

Showing and copying a password

Every row action asks you to confirm it is you first: show, copy, edit, share and delete.

1. Choose the action. Enter your account password (and the code emailed to you, if your account uses two-step sign-in).
2. Your confirmation is remembered for a few minutes, so a few actions in a row do not ask again.
3. Show displays the password for a short time and then hides it again. It also hides when you close the window or leave the tab.
4. Copy places the password on your clipboard without showing it.

Too many wrong attempts lock further attempts for a while. Whether you may show or copy is a separate permission from being able to see the entry.

Sharing

The owner picks a person and the access level, and sees exactly what the person will be able to do before saving. Revoking a share takes effect immediately.

Revoking cannot make someone forget a password. A person who already saw or copied it may still know it. If that matters, change the password at the service and update the credential.

Safe habits

• Never put real passwords in notes or chat.
• Copied passwords can stay in clipboard history or be synced between your devices by tools outside PIY Action, which cannot clear them. On a shared or synced computer, prefer Show.
• Share with as few people as needed, and revoke when the need ends.
• Passwords are stored encrypted, and every reveal, copy, share and change is recorded in an audit log that never contains the password.

Permissions

An administrator gives access under Credential Manager > Access: using the manager, viewing, adding, editing, deleting, showing and copying your own credentials; viewing, editing, showing and copying shared ones; and sharing. Administrators can manage who has access and read the audit log, but they cannot read other people's passwords.