Frequently asked questions

Every installed Manic Toolkit app includes Manic Vault, a password manager for logins, device and SSH credentials, two-step codes and secure notes. Manic Vault Team adds a server you run yourself, so your team can share collections of them.

It is priced per person, per year. Up to 3 people need no licence. Longer terms cost less and volume discounts apply automatically at checkout. See the pricing page for current prices.

No. The server is zero-knowledge: people's computers encrypt everything before it is sent. Each collection has its own key, sealed to each member's personal key. Being an administrator does not let you read a collection you have not been given.

Windows Server 2016 or later, 64-bit Linux with systemd (RHEL, Rocky and Alma 8+, Ubuntu 20.04+, Debian 10+), or Docker. 1 vCPU and 512 MB of RAM is plenty for hundreds of people, and the package includes its own copy of Node.js.

No. It needs one TCP port (8443 by default) open from the networks your people work on, such as the office or VPN, and a DNS name or fixed IP address for the invite links. It needs no internet access.

Remove them under People. Their access ends at once and the collections you manage get new keys. Change any passwords they could see if that matters.

An owner can use the organisation recovery code under Team administration to give someone access. The code is shown once when you set up the organisation; neither the app nor the server keeps it, so keep it offline.

Yes. Link the server to Manic Control and people join and sign in with their organisation account (Manic Control or Active Directory), and Control decides their role. Control never sees keys, items, collection names or master passwords. Owners always stay local.

There are 14 days of grace before the limit drops back to 3 people. Nobody loses what they already have.