VaultPilot sharing starts with the selected records. Operators package only the records and files they choose, not an entire vault.
Internal and external sharing use different recipient and package boundaries. External recipients open packages with the Offline Share Decrypter from vaultpilot-share-decrypter.zip.
Internal sharing
Internal sharing is for registered VaultPilot users.
- Recipient identity and public-key state are checked.
- Selected records are wrapped for the recipient.
- Audit events are written for share creation, view and revoke actions.
- Recipient access remains bounded by role and vault access.
External sharing
External sharing creates an offline package for recipients outside the VaultPilot server.
Required policy decisions:
| Policy | Purpose |
|---|---|
| Selected records | Only chosen passwords, API keys, credentials, notes, certificates or files are packaged. |
| Passphrase | Recipient must know the passphrase to open the package. |
| Expiry | Package becomes unusable after the configured time. |
| Maximum opens | Package stops opening after the configured open count. |
| File inclusion | File-backed secrets can be included when sensitivity and size are acceptable. |
Completion state
After a package is completed, the Sharing screen shows:
- Generated package is visible in history.
- Passphrase delivery guidance is visible.
- Expiry and maximum open count are shown.
- Revoke and audit actions remain available.
- The recipient workflow links to the Offline Share Decrypter.
Offline decrypter
The HTML tool inside vaultpilot-share-decrypter.zip runs fully in the browser.
Trust indicators:
- Local-only operation.
- No network connection required.
- Package, passphrase and metadata checks happen in the browser.
- Wrong passphrase, tampered metadata, expired package and exhausted usage limit produce separate errors.
Operator guidance
- Send the package and passphrase through different channels.
- Use short expiry for high-sensitivity material.
- Use low maximum open count for one-time handoffs.
- Revoke packages when recipients no longer need access.
- Do not paste package contents, passphrases or secret values into tickets or chat.