Everyone has sent a password through a chat app at least once. It feels harmless because it is routine: the Wi-Fi code for a guest, the streaming login for a partner, a work account for a new colleague. Yet each of those messages is a permanent, searchable, syncable copy of a secret that you can no longer control. Proton Pass shared vaults exist to replace that habit, and this guide shows how to set them up for a family or a team in under an hour.
Why Shared Passwords Go Wrong
A password pasted into a chat stops being a credential and becomes a document. It is stored on the messaging provider's servers, on the phones of everyone in the conversation, in backups nobody remembers making, and — for group chats — on the devices of people who left the group long ago. Changing the password does not recall the copies, and six months later you have no idea who still holds the old one.
Shared email drafts, shared notes and spreadsheets named "logins" are the same problem wearing different clothes. What families and small teams actually need is a place where shared secrets live encrypted, update everywhere automatically when they change, and can be taken back from a specific person with one action. That is precisely the job description of a shared vault.
What a Proton Pass Shared Vault Is
A shared vault in Proton Pass is an ordinary encrypted vault with a list of members. Every item inside is encrypted with keys that are distributed only to the devices of those members; the server coordinates the sharing but can never read the content. When you change a shared password, the update is re-encrypted for everyone and reaches all members automatically — nobody has to announce the change in a chat ever again.
You can also share a single item instead of a whole vault, which is perfect for one-off situations: give one person access to one login without exposing anything else. Both mechanisms keep encryption end to end, because access is managed by re-encrypting item keys for the people who should have them, not by unlocking anything on the server.
Setting Up a Family Vault
Start by deciding what belongs in shared space. In most households the answer is short: streaming services, the Wi-Fi password, utility accounts, the family tax folder, insurance documents and anything a partner would need in an emergency. Your personal vault stays personal — shared space should never become a dump for every login you own.
- Create: make a new vault and name it for its purpose, such as "Family" or "Home".
- Invite: add the people who genuinely need access; each receives an encrypted invitation.
- Move: transfer the relevant items into the shared vault.
- Maintain: update passwords normally — every member sees changes instantly.
The result feels unremarkable in daily use, which is the point. Your partner signs in to the streaming service from their own device, the vault fills the credentials, and the only thing anyone ever typed into a chat again is the password to the guest Wi-Fi — which you can now simply share as an item that expires with their visit.
Sharing Single Items Instead
Not every situation needs a standing vault. A contractor who needs one login for a week, a relative who asks for a document folder, a friend staying over who needs the media server — these are item-sharing moments. Share the individual entry, encrypted for that person, and remove the share when the need ends. Nothing else in your vault is ever visible to them.
Item sharing also solves the "emergency access" conversation that families avoid. Rather than writing every password on paper for "just in case", you can agree that critical accounts live in a shared vault from the start — so if something happens to one person, the family is not locked out of the accounts that keep a household running.
Revoking Access the Right Way
The real test of any sharing system is what happens when someone leaves: a relationship ends, an employee changes roles, a phone is sold. In Proton Pass, removing a member takes immediate effect — their devices lose the keys needed to decrypt the vault, and future updates are invisible to them. After removing anyone, rotate the passwords of the most sensitive items as a matter of hygiene, because copies they may have seen while they had access cannot be un-seen.
This is the step chat-based sharing can never offer. You cannot unsend a message to a person who kept a screenshot, but you can control who holds working keys to a vault. Control, not trust, is what makes sharing genuinely safe.
A Better Habit for Everyone Around You
Setting up sharing properly has a side effect nobody mentions: the people you share with start using a password manager too. A family member who receives their first shared item is one step away from their own vault, their own generated passwords and their own 2FA codes. Security habits spread through households and teams far more effectively through convenience than through lectures.
So the next time someone asks you to "just send" a password, take the extra minute instead. Create the share, invite them properly, and let encrypted access do what a chat message never could. If you are new to the vault itself, start at the Proton Pass home page and set up your account — then make shared vaults the first thing you build.
