TessariDB Vault
A password manager for companies: records encrypted in each member's browser, shared by person, team, department or company, and every piece of state kept in TessariDB.
TessariDB Vault keeps a company's passwords, keys, notes and small files as records encrypted in the browser of the member who writes them. The server and the TessariDB node behind it store and move ciphertext; neither holds a key that opens a record. One Rust binary serves the API and the web application.
Status. Release
0.0.1, the first. The image istessaridb/vaultand the source is the repository. The configuration and the HTTP surface may still change in a later release.
Start here
- What it is: who it is for, what it keeps and where, and what it deliberately leaves out.
- Running it: the compose file, the first person, the first company, and the binary without Docker.
Then
- Companies and roles: owners, admins and members, departments and teams, joining and signing in.
- Records and sharing: record types, files, shares, and what removing a person does.
- Recovery: how an owner hands a member's keys back, and how the member sees it.
- Keys and layers and What it does not protect against.
- The HTTP API: every route and who may call it.
The product page is vault.tessaridb.com. The source is on GitHub under the Business Source License 1.1: production use is free, commercial use included, and a commercial licence is needed only to offer it to others as a hosted service for their passwords and secrets, or to sell it.