Set up PGB Vault, your company password manager

PGB Vault is your company's password manager. It stores logins for websites and tools, fills them in for you, and shares chosen passwords with your team. It is the Passwords tab of Vault.

If the page says your provider has not installed the vault for this workspace, the passwords part is not available. The Secrets tab still works. See Store keys in Secrets.

Zero-knowledge, in plain words

Everything in your vault is encrypted on your own device with your master password before it is stored. Nobody else can read it, not your administrator and not PGBHub. That also means nobody can recover it if you forget the master password. Write yours down somewhere safe.

Get set up (about five minutes)

Open Vault. The Passwords tab shows Your vault's server address with an Online or Not answering indicator, and a button, Open PGB Vault. Then follow the four steps on the page:

1. Sign in with your company account. Open the vault address, enter your work address and choose Use single sign-on. If it asks for an SSO identifier, enter your company name. You sign in with your PGB Business account. If there is no single sign-on button, your administrator has not finished setting it up and can invite you to the vault by email instead.
2. Set your master password. The first time, you choose one. Make it long: a short sentence works well. It encrypts your vault on your device and is never sent to anyone. It cannot be reset.
3. Install the app on your devices. The page lists download links by device: browser extension, phone and tablet, and computer. After installing, on the sign-in screen change the server to Self-hosted and enter your vault's server address, shown on the page. Then sign in the same way as step 1.
4. Share with your team. Shared passwords live in your workspace's organization in the vault. Your administrator invites you by email with your work address. Accept the invitation and the team's collections appear next to your own items.

Personal and shared items

Personal items stay private to you, even inside the organization. Only items you save into a collection are shared with the people who have access to that collection. Ask your administrator which collections you belong to, for example Finance or Support.

For administrators

In Admin, the Vault tab registers the vault for single sign-on and creates the New organization. Invite staff to it, create a collection per team, and remove a leaver's access promptly.

Good to know

• Your administrator cannot see your passwords or reset your master password.
• Using a long, unique master password matters more than anything else you can do here.
• Keep passwords for people in Passwords, and keys for software in Secrets.

Common problems

• "Not answering." Try again in a moment. If it stays that way, tell your administrator.
• I forgot my master password. It cannot be recovered, and nobody else can open your vault for you. Ask your administrator what to do about access to shared collections.