Vault
The sign-ins, cards, notes and files your business runs on, each one readable only by the people it was shared with, encrypted on this machine before Keyway stores it, and every read recorded before it is shown.
Getting started
These are the steps in the order somebody would do them. The same list is in the tool: press F1, or the control reading "How this works" at the top of the window.
1. Choose a passphrase, press Set up my vault, then New secret
It opens your own key on this machine and never leaves it, not to Keyway and not to anybody who looks after the computers. It is not your Keyway sign-in, on purpose: Keyway checks your sign-in, and a key Keyway could check is a key Keyway could open.
2. Put a secret in a collection
A sign-in, a secure note, a payment card or a file. It is sealed here before it is sent, and what Keyway stores is its name and a sealed copy. The name is what the list and the search read, so a name is never the secret itself.
3. Share it with a person or a role
Sharing hands your colleague their own copy of the key, made for their own key on your machine. Taking a share back stops their next read at once; anything they already read is outside any tool's reach, so change the secret itself if it matters.
4. Make sure a second administrator holds the recovery key
A lost passphrase loses nothing when another owner or administrator holds the business's recovery key: they hand the keys back. Nobody can recover their own vault. With one holder, a lost passphrase is a lost vault for everything only that person could open.
The screens, and what to do first on each
Each of these opens with nothing on it on a new install. What the tool says on that screen is what this section says, because it is the same sentence.
Nothing is in your vault yet
This screen is every secret shared with you, by name. Opening one writes a line in the business's audit before anything is shown, with your name on it.
First thing to do: Add the first secret to a collection.
No password has been made on this screen yet
Made on this machine from Windows' own random source, with at least one of every kind of character you ask for, and the strength said in bits.
First thing to do: Press Make a password.
Your passphrase, the recovery key and the export
Change your passphrase, give the recovery key to a second administrator, hand a colleague who lost their passphrase their keys back, or take an encrypted copy of everything you can open.
First thing to do: Read who holds the recovery key before anything else.
If you get stuck
Write to support@keywaysuite.com. We answer within one business day. Keyway can send us what it knows about your installation: open the hub, go to About and press Get support. It writes one file wherever you choose and never includes your licence, a password, a customer name or a customer address.