Your vault, your scope.
Sign in or open the invitation provided by your operator.
If invitation, verification or password-reset mail is missing, check your spam folder for VaultPerch mail from verify@auth.vaultperch.com. Dev uses verify@auth.dev.vaultperch.com.
Sign in
Accept invitation
The invitation was read from the link and removed from the address bar. Submit below to use it.
Confirm email
Opening this link has not verified the account.
Choose a new password
Opening this link has not changed the account.
Forgot your password?
A request does not change account access. Lost mailbox? Contact support@vaultperch.com using a pre-existing trusted channel.
Credential use is quarantined. Review surviving inventory, replace access grants and enroll fresh receivers before activation.
Confirm sensitive administration
Confirmation lasts five minutes. If an action asks for confirmation, confirm here and then submit that action again.
1. Vaults
Environment labels do not prove provider-side permissions.
2. Principals
3. Grants
4. Credential import
5. Device enrollment
Handoff rules
The source machine uses this rule to create a shared reference. The receiving machine requests a delivery using the returned shared credential ID.
Revocation boundary
Revoke VaultPerch access stops new admissions. It cannot recall delivered bytes or retire the provider credential. Rotate with the provider after suspected exposure.
Recovery and encrypted backups
Refresh metadata to inspect recovery state.
Restore replaces the inventory with the selected snapshot, preserving current password and current revocations. Newer inventory may be lost. All sessions end; restored grants, enrollments and handoff rules stay inactive. Sign in again, review surviving credentials, create fresh grants and enroll receivers, then activate.
A prepared or failed restore cannot be activated. Contact support to repair it and complete a successful restore. Key loss cannot be repaired by a password reset. No recovery-time SLA or owner export is offered.