Credentials vault
Shared department secrets — vendor logins, plant credentials, treasurer's bank portal. Encrypted, role-gated, audited. Ends the sticky-note problem.
Department-vault summary with access log — credential values intentionally not displayed. Staff view.
Department-level shared vaults with role-based access. Encrypted at rest with a town-controlled key. Every read logged to the tamper-evident audit trail. Replaces the spreadsheet of passwords on the front-desk computer.
What you can do with credentials vault.
Per-department vaults with role-based access
Town-controlled encryption key — never held by us
Append-only audit log of every read, write, and rotation
Hardware-backed MFA enforced on every access
Rotation reminders for time-bound credentials
No vendor (us) access to your secrets, ever
Credentials vault — answered.
The questions we hear most when towns are evaluating this module. Anything specific to your charter, your state, or your existing vendor — we'll answer on the discovery call.
01 Can TownAdminPro staff see our stored credentials? +
02 What happens when an employee leaves? +
03 What kinds of credentials do towns actually store here? +
04 Does this replace 1Password or LastPass? +
The modules credentials vault talks to most.
Run your town
on one system.
Thirty-minute discovery call with the actual builders. Bring last month's spreadsheets; we'll bring the questions.