Frequently asked questions

Credseal is a team credential-sharing tool built by unbundio. It lets a team share infrastructure accounts — server IPs, ports, and administrator logins — with end-to-end encryption in the browser, and keeps a signed record of who viewed or changed what, and when. It runs in a web browser with nothing to install, and you can start on the free plan.

Encryption and decryption happen only on users' devices. The master password and vault-opening keys stay there. For new-device sign-in, the server stores a hash of a separate one-way authentication key and its KDF salt; that hash cannot decrypt the vault. The server also stores ciphertext, device public keys, membership, and audit records. It does not protect against malware on a user's device or a malicious script in an unlocked browser session. The security page explains the design and its limits.

No. Vault content is encrypted in your browser and stored only as ciphertext. Credseal does not hold the decryption keys.

We cannot reset it. Credseal never stores or learns your master password. The recovery key you created at sign-up lets you restore the vault and set a new master password; if you lose both, nobody — including us — can open the vault. That is a consequence of keeping the unlock secret away from the server. Store both safely.

Ciphertext and the minimum account metadata are backed up on our infrastructure. Plaintext and private decryption keys are not stored there.

Vault items use AES-256-GCM. Group keys are wrapped with ECIES over ECDH P-256, deriving the wrapping key with HKDF-SHA256. Device signatures use ECDSA P-256, and the local unlock key is derived from your master password with Argon2id. All of it runs on the browser's standard WebCrypto implementation.

Credseal revokes access and rotates the group key. Because already copied plaintext cannot be erased remotely, it also flags affected credentials for real-world password rotation.

No. Signatures and hash chaining raise integrity, but a modified or offline client may omit some client-generated viewing events. We document that limitation.

No. The product runs in a modern browser.

Procurement and internal security requirements vary. Contact us for the architecture and deployment evidence needed for your review; no specific certification is implied.

There is a free plan for small teams. Pro costs KRW 6,000 per user per month when billed monthly, or KRW 5,000 per user per month when billed annually (KRW 60,000 per year), VAT excluded. Annual billing is two months free compared with KRW 72,000 for 12 monthly payments. Enterprise and public-sector organizations receive a separate quote. The free plan covers 2 groups, 50 items per group, 5 members per group (pending invitations included), and 30 days of audit history. Full limits and the billing and refund terms are on the pricing page and in section 9 of the Terms.