Guide

How to share credentials with clients securely

Agencies, freelancers and IT providers need logins, API keys and licence codes from clients, and clients usually reply by email. Those messages sit in both inboxes for years. There are two directions to handle: sending credentials to a client, and asking a client to send them to you.

Last updated: 2026-10-12

Sending a login to a client

  1. Create a one-time link with a short expiry and send it by email or chat.
  2. Add a passphrase for sensitive accounts and tell the client by phone or another channel.
  3. Ask them to change the password after first login, and note in your records that you shared it.

Asking a client to send you a login

Clients rarely know how to send credentials safely, so make it easy for them. A secret request gives the client a link where they paste the information and submit it. They do not need an account.

On SecureVoult, requests are encrypted in the client's browser to a key held by your browser, so the service stores only ciphertext that your browser can open. Open the result on the device where you created the request.

Good practice for agencies

  • Request the minimum access needed, such as a limited user instead of the owner login.
  • Never ask a client to paste credentials into a ticket or shared document.
  • Remove access when the engagement ends.

Frequently asked questions

How can a client send me a password without email?

Send them a secret request link. They paste the password into a form, submit it, and you open it once from your dashboard.

Do my clients need an account?

No. Anyone with a request link can respond without signing up.

Share a secret now

Create a one-time, self-destructing link in seconds. No account needed.

Create a secret link

Related guides