# Share credentials (/connect/vault/share-credentials-with-teammates)



## What is sharing a credential? [#what-is-sharing-a-credential]

Sharing a credential grants someone **access to use it** under a policy you set. It does not transfer ownership, and the share form does not reveal the secret value.

<LivePreview component="Vault" />

## How to Share a Credential [#how-to-share-a-credential]

<Steps>
  <Step>
    ### Open Vault and choose the credential [#open-vault-and-choose-the-credential]

    Open **Vault**, then select the credential you own. If the credential is not there, add it first and keep its name specific enough that teammates can recognize what it is for.

    <LivePreview component="Vault" />
  </Step>

  <Step>
    ### Click Share [#click-share]

    In the credential detail view, click **Share**. Choose the human teammate or AI teammate that should be allowed to use the credential.

    <LivePreview component="Vault" />
  </Step>

  <Step>
    ### Pick the access policy [#pick-the-access-policy]

    Choose **Trusted access** when repeated use is expected, or **One-time access** when the secret should be released once and then consumed. Add an expiry when access should end automatically.

    <LivePreview component="Vault" />
  </Step>

  <Step>
    ### Add a reason and confirm [#add-a-reason-and-confirm]

    Write why the credential is being shared, then confirm. The reason becomes part of the audit trail and helps future reviewers understand why access exists.

    <LivePreview component="Vault" />
  </Step>

  <Step>
    ### Review or revoke later [#review-or-revoke-later]

    Use **Shared by me** or the credential detail's sharing section to see outgoing grants. Click **Revoke access** when the project ends, the teammate changes role, or the credential rotates.

    <LivePreview component="Vault" />
  </Step>
</Steps>

## What the recipient sees [#what-the-recipient-sees]

The credential appears in their **Shared with me** tab. A human grantee can reveal and copy the secret under the policy you set; they cannot edit, rotate, re-share, or delete the credential.

<Cards>
  <Card title="Requestable credentials" href="/connect/vault/requestable" description="Let teammates discover and request a credential safely." />

  <Card title="Trust levels" href="/ai-teammates/control#how-trust-carries-forward" description="How credential trust fits the wider approval model." />
</Cards>