The vault and folders

What it looks like

The vault works like Windows Explorer. Three view modes — icons, list and tree — chosen with the buttons at the top right.

One click on a folder steps into it: on the left you get the menu of what you can do in there (contents, servers, VPN, recording, cloud import, automation and who has access) and in the middle, whatever you picked. The breadcrumbs at the top take you back.

Each section explains itself when you open it, and the + button at the bottom right adds whatever fits: a folder when you are looking at the contents, a server when you are in Servers.

Everything is right-click

There are no create or delete buttons. Right-click on the background offers a new folder; right-click on a folder offers open, new subfolder, rename or delete.

Inheritance: the most specific wins

What you set on a folder is inherited by every folder inside it. Configure the VPN once on "Clients" and the forty servers below use it; change it in one place and it changes for all forty. Same with permissions.

When a folder defines its own, that beats what it inherits. The same rule applies to credentials, to the VPN and to permissions.

What the server sees

Nothing in the clear. Each folder has its own encryption key, and that key is stored wrapped with your account key. The server only holds encrypted blobs: it cannot read a password of yours even if it wanted to.

Not even your sign-in password reaches the server. The browser turns it into two different values: one opens the vault and never leaves your machine, and the other — which cannot be reversed — is the only one that travels, to prove it is you.

Moving folders

Folders are drag and drop. Dropping a folder inside another moves it in the tree, and with it what it inherits. A folder cannot be dropped into itself or into one of its own children: that is blocked before it reaches the database.