Shared vaults

#What a shared vault is

A shared vault is separate from your personal vault and has its own encryption key. When the owner invites someone, MimiKey encrypts the vault key with that member's own public key before handing it over. The server only passes ciphertext along and can't see what's in the vault.

Shared vaults are currently created and managed in the Mac app and the web vault. The number of shared vaults and members per vault depends on your plan; see Plans and billing.

#Create a shared vault

Mac

1. In the sidebar, under Shared vaults (共享库), click New shared vault (新建共享库).
2. Enter a name and click Create (创建).

Web vault

1. In the sidebar, under Collaboration, open Sharing (共享).
2. Under New shared vault (新建共享库), enter a name (for example "Family") and click Create (创建).

#Invite members

Only the owner can invite members. The person you invite must:

• already have a MimiKey account, and
• have signed in at least once with a recent version of a MimiKey app. Signing in creates the keys their account needs for sharing.

Mac

1. Select the shared vault in the sidebar and click the members button in the toolbar.
2. Under Invite member (邀请成员), enter their account email and choose Can edit (可编辑) or Read only (只读).
3. Click Invite (邀请).

Web vault

1. In Sharing, open the shared vault.
2. Under Invite member, enter their email and choose Read only (只读) or Read-write (读写).
3. Click Invite and share key (邀请并分发密钥).

If the member list says the person hasn't signed in with a recent app yet (对方还没登录过新版客户端，无法共享密钥), ask them to sign in once, then invite them again.

Note The web vault shows the shared vault's key fingerprint (库钥指纹). If you and a member see the same fingerprint, you're both using the same vault key.

#Change access and re-share the key

The owner can switch a member between Can edit and Read only from the member list. The change takes effect immediately.

If a member is waiting for the key to be shared again (待重新共享密钥; in the web vault, the key hasn't been shared or has expired), the owner can click Re-share (重新分发) to send them the current vault key.

#Remove a member

1. In the member list, the owner clicks Remove (移除) next to the member.
2. After you confirm, MimiKey immediately replaces the vault key and re-encrypts every item in the vault, so the removed member can't decrypt anything from then on.

Important Removing someone can't take back what they've already seen, copied or exported. If they knew passwords stored in the vault, change those passwords on the websites concerned.

#Work with shared items

• Open a shared vault from the Mac sidebar or from Sharing in the web vault to see its items.
• The owner and members who can edit can create items in the shared vault; saved changes sync to everyone.
• Deleting an item in a shared vault deletes it for every member.
• Read-only members can only view and copy.

#Leave or delete a shared vault

• Leave (退出共享库) — members: you lose access to the vault's items. Anything you copied or exported earlier isn't affected.
• Delete (删除共享库) — owner: all items and memberships are deleted, and every member loses access immediately. This can't be undone.

#Troubleshooting

The invitation didn't work. Check the email address, and make sure the person has signed up for MimiKey with it and signed in at least once.

A member can't see the shared items. Make sure they've signed in with a recent app, and have the owner Re-share the key with them.

Does changing my master password affect sharing? No. When you change your master password, MimiKey re-protects your sharing keys with the new password as well.