Access Credentials
Store WiFi passwords, door codes, lockbox combinations, and other sensitive access information securely in Estavo.
How credentials are stored
All access credentials are encrypted with AES-256-GCM before being saved to the database. The raw value is never stored — only the encrypted ciphertext. The encryption key lives in a server environment variable, not the database.
What this means in practice:
- Credentials are never visible in database exports or backups
- Credentials are never returned in list API responses — only on explicit reveal
- Every reveal is logged with a timestamp and user identity
Who can see credentials
Only users with the Owner or Manager role can view access credentials. Accountants, Maintenance coordinators, and Viewers cannot see them, even if they have access to the unit.
See Team & Roles for the full permission matrix.
Adding credentials to a unit
Open the unit detail page
From Portfolio, click the property, then click the unit.
Go to Access & Details
Click the Access & Details tab.
Add a credential
Click Add credential. Choose the type:
| Type | Examples |
|---|---|
| WiFi | Network name + password |
| Door code | Keypad entry code |
| Lockbox | Lockbox location + combination |
| Gate code | Community gate entry code |
| Alarm code | Security system disarm code |
| Other | Any other sensitive access info |
Enter the label (e.g., “Front door keypad”) and the value (the code or password).
Save
The value is encrypted immediately on save. You’ll see a masked version (•••••••) in the UI.
Revealing a credential
Every credential reveal is permanently logged in the audit trail — who viewed it and when. This applies even to Owner-role users.
To see a credential’s actual value:
- Open the unit → Access & Details
- Click the eye icon next to the credential
- A confirmation dialog appears: “This reveal will be logged. Continue?”
- Click Reveal to see the value for 30 seconds
- The value auto-hides after 30 seconds
You can copy to clipboard during the reveal window.
Adding credentials to a property
Some credentials apply to the property as a whole, not a specific unit (e.g., a shared gate code or building entry code for a multi-unit property).
These work identically to unit credentials — same encryption, same role restriction, same audit logging — but live on the property rather than a specific unit.
Access them at Portfolio → [Property] → Access & Details.
Guest Welcome packet
For short-term units, WiFi and door code credentials are optionally included in the Guest Welcome packet.
When generating or sharing a Guest Welcome link:
- You choose which credentials to include
- The share link is time-limited
- The link does not require the guest to log in
- Credential reveal via the share link is also logged
The Guest Welcome packet is separate from the Estavo credential vault — you’re choosing to share specific values in a specific context, not giving the guest vault access.
Updating credentials
To update a credential (e.g., you changed the WiFi password):
- Open the unit → Access & Details
- Click the credential
- Click Edit
- Enter the new value
- Save — the old value is replaced; the new value is encrypted immediately
There is no credential history — updating a credential replaces the value. If you need to track historical codes, add a note to the transaction or maintenance request where the change was made.
Deleting credentials
To delete a credential:
- Open the credential
- Click Delete
- Confirm
Deletion is permanent. The encrypted value is removed from the database.