Workspace / Desktop vault
Local vault
OFFLINE DESKTOP ACCESS

Access stays
local.

One private vault for your Ubuntu desktops.
Automatic rotation, even when they’re disconnected.

01
One seed for each desktop

Unique credentials. A common local agent.

02
Custom password rotation

The agent works independently of this vault.

03
Ready when you need access

Calculate the expected password in your browser.

YOUR ENCRYPTED VAULT

Unlock your vault

Enter your passphrase to access desktop credentials.

Locks automatically after 20 minutes of inactivity.
ADD A DESKTOP

Enroll a desktop

Create its unique seed and choose its password change frequency.

A label for this desktop. Use letters, numbers, dots, dashes or underscores.

An existing, unlocked local account on the desktop.

The rotation schedule starts at midnight UTC on this date.

Change every selected number of days, weeks or calendar months. Default: every 6 months. Set this before provisioning the desktop.

The agent changes the Linux password. It does not synchronize GNOME’s login keyring.
DESKTOP CREDENTIALS

Desktop

Frequency is set at enrollment and included in the offline installer.

Automatically hides after 30 seconds.
Application on the desktop is unconfirmed. A previous period’s password works only if that period is still applied locally.

One-command desktop setup

Download the ZIP named after this desktop, extract it, and run the installer on the intended Ubuntu 20.04 desktop:

sudo sh install-agent.sh

Applies the current password and enables automatic rotation. Keep this installer private: it includes the desktop’s secret seed.

Remove from inventory

Deleting removes this desktop’s record and secret seed from this vault. The offline desktop keeps rotating its password. Keep its installer, setup bundle or a vault backup if you need to recover future passwords.

Existing downloads and older backups are not deleted. Enrolling the same name again creates a new seed and will not match the existing desktop.
VAULT SETTINGS

Protect your vault

Encrypted backup

Save an encrypted copy after enrolling desktops. Keep its passphrase separately.

Change vault passphrase

This re-encrypts the vault and locks all browser sessions. Desktop passwords stay on their existing schedule.

Older backups still require their original passphrase.
SETUP REFERENCE

Installer and agent error codes

Find the code shown on your Ubuntu desktop. This reference is available while the vault is locked.

After a setup failure, automatic rotation is not confirmed. Keep the existing enrollment and state, resolve the cause, then rerun the same installer.

Installer and agent codes, meanings and steps to resolve them
CodeMeaningWhat to do

I codes cover setup, C codes cover shared validation, and A codes cover the agent. Re-download from the same desktop record; rerun that matching installer to update an installed agent.