Navigation
Vault access. Public access is not open. This product is separate from initial Identity and Apparatus access.
Screenshots use fictional demonstration accounts. Your data and available actions may differ. Reviewed October 16, 2026.
Help
Troubleshoot Vault
Vault is missing from the top-left menu
Identity supplies the permitted tools. Check your account and workspace, then ask an administrator to confirm service access. A direct URL does not grant access.
The credential list is empty but an owner sees records
The list is scoped to effective access. Check the workspace and ask the owner to inspect the intended credential or folder grant. Developer membership alone does not imply access to every secret. Clear local and search filters too.
A grant was removed but the person still has access
Check inherited folder grants, other applicable grants and owner privileges. Remove direct grant removes one source of access. Review Your access and the containing folder.
Copy returns only one part of a credential
The action names its primary value. For Login usernames, AWS key IDs/session tokens or TLS certificates, use the complete encrypted record through a client. The console does not provide a full-record clipboard button.
A lease read fails
Check whether the handle is consumed, expired or revoked. It is single use. Authentication and scope errors are separate from lease state. Obtain another lease only if the approved work still needs a read.
A field says Use JSON or Use certificate chain
That accepts the field into the form. Store credential saves the whole record. If validation fails, correct the indicated field and review the type and storage location before submitting again.
A rotated or archived credential still works elsewhere
Vault changes its own stored record and lease behavior. It does not revoke the provider credential or erase previously returned values. Finish the provider-side rotation.
Audit export is unavailable
Check both the plan entitlement and export-service configuration. A plan card alone does not prove the export service is configured.
A page fails to load
Use Try again. If you were saving, inspect the current record before repeating the action. Report the page, workspace, approximate time and any correlation ID, without secret values. hello@ghoststack.app is the public contact address.
Screen reference
