Something new is coming up soon from Kanishu — stay tuned.
Kanishu Vault Encrypted. Yours. Only.

Protect your business credentials. Share access securely.

Keep passwords, sensitive notes and one-time codes organised in an encrypted vault, while enabling sharing across your team. Kanishu Vault encrypts information on your device before it is stored. Recipients of shared items use their own independent secrets, which are not disclosed to the person sharing the item.

See plans & pricing How it fits into the suite →

The problem

Shared passwords live in spreadsheets and chats

Credentials are passed around insecurely, leave with the people who leave, and nobody can say who had access to what.

What changes with Password Vault

Encrypted on your device

Items are encrypted in your browser before they leave it; Kanishu's servers cannot read them.

Sharing with control

Team vaults for shared credentials, with access you can see and remove.

Recovery without a back door

A locked-out member is reset only with two of your own admins approving — never by Kanishu. A reset restores access, not personal items encrypted with the old keys.

An audit trail

Every vault action is recorded in a chained log your admins can review.

Key capabilities

What Password Vault does across its plans. Availability and limits vary by plan — each capability below shows the plan it starts on, and the comparison lists every difference.

Encrypted in your browser before anything leaves your device
Your master password and Secret Key are both needed to open the vault
Password generator, strength check and one-time codes built in
Emergency kit to start a reset if you lose your sign-in device
Trash with 30-day restore and a full version history

Works with the rest of Kanishu

Other Kanishu products

The same Kanishu account and sign-in as the rest of the suite.

Everything Password Vault does

Every capability, grouped by what it's for — not a feature-name soup.

Your vault

Encrypted items (All plans)
Login items, secure notes and custom fields. Hidden fields stay masked until you choose to show them.
Two secrets to open (All plans)
Your master password and Secret Key together. The Secret Key is shown once, when you set up the vault.
Auto-lock (All plans)
The vault locks after five minutes without activity and clears the key from memory.
Folders and search (All plans)
Group items in folders and find them by name. The server never learns folder names.

Passwords and codes

Password generator (All plans)
Strong random passwords of the length you choose.
Strength check (All plans)
Shown as you type, on your device, with no outside service.
One-time codes (All plans)
Store a site's one-time code generator next to its login and see the live six-digit code.
Copy with auto-clear (All plans)
A copied password is cleared from the clipboard after 30 seconds.

Moving and recovering your data

CSV import and export (All plans)
Bring passwords in from a spreadsheet or another manager, and take a copy out at any time.
Trash and version history (All plans)
Deleted items stay for 30 days. Every change keeps the earlier version, and you can restore one.
Emergency kit (All plans)
A one-time recovery code, shown when you set up the vault, that lets you start a reset if you lose your sign-in device. Keep it with your Secret Key.

Teams

Shared team vaults (Growth+)
Share a vault with your team, with owner, editor and viewer roles. Each member holds their own key, and items are encrypted on your device before they are stored.
Admin-approved account recovery (Growth+)
If a member is locked out, two other organisation admins approve a reset — never Kanishu. A reset sets a new master password and Secret Key; personal items encrypted with the old keys cannot be decrypted by anyone.
Audit log (Growth+)
See who changed what in your organisation's vaults, in a chained log where a later edit is detectable.
Priority support (Business+)
Your support requests are answered first.

Security

Each organisation's business records are kept in its own database, separate from every other customer's.
Multi-factor authentication any user can turn on; on Growth and above, admins can make it compulsory.
Role-based access, adjustable person by person, permission by permission.
A history on every record — who changed what and when — in a chained audit log, so a later edit to the log is detectable.
Vault items are decrypted only on an authorised member's own device, when the vault is unlocked. The Secret Key is shown once, at set-up.
End-to-end encryption: items are encrypted in the browser with a key only the user holds; the server stores only encrypted data.
Two secrets open a vault — the master password and a Secret Key shown once at set-up.
Auto-lock after five minutes without activity, and copied passwords cleared from the clipboard after 30 seconds.

Plans & pricing

Capabilities marked "All plans" above are in every plan; higher plans add capacity and the capabilities marked with the plan they start on.

Starter

INR 199 /mo

Growth

INR 399 per agent /mo

Minimum 2 agents — from INR 798/mo

Business

INR 599 per agent /mo

Minimum 5 agents — from INR 2,995/mo

Full plan comparison

Included Starter Growth Business
Encrypted items, folders and search
Password generator, strength check and one-time codes
Trash, version history and CSV import or export
Emergency kit for recovery
Users 1 From 2 From 2
Shared team vaults —
Admin-approved account recovery —
Audit log —
Team vaults — 10 Unlimited
Require MFA (for admins only, or for everyone) —
Organisation-wide change log and export —
Joiners, movers and leavers (People) —
Email support (first reply within 3 business days)
Priority support (first reply within a business day) — —
Automatic login changes for joiners and leavers — —
Single sign-on with your identity provider (SAML: Entra ID, Google, Okta) — —

Questions

Can Kanishu see our passwords?

No. Items are encrypted on your device with keys only your users hold, so the stored data is unreadable to Kanishu.

Can I buy just this product?

Yes. Every Kanishu product is sold and billed on its own. Start with one and add others later from the same account — no bundle.

Do the products share one sign-in?

Your team moves between the Kanishu products your organisation uses without signing in again. Each product keeps its own roles and permissions, and People keeps one directory of your staff for all of them.

What happens when we reach a plan limit?

Your admins get an email at 80% and again at 100% of a limit. Nothing is deleted: at the limit you can't add more until you free some up or upgrade, and the usage is shown on your My Plan page.

Do you issue GST invoices?

Yes — a GST tax invoice in rupees for every payment.

What support do you offer?

Support is by email, from inside the product (Contact Support) or by replying to our emails. We reply within 3 business days on every plan, and within 1 business day on plans that include priority support. Business days are Monday to Friday, 9:00 to 17:00 India time. We don't offer chat or phone support.

Using more than one part of your IT stack?

See how Password Vault connects with the rest of the suite — one account, single sign-on, and cross-linked records.

How the suite works together
← Back to all products