Account Sharing Overview

Account Sharing is Optserv's HR-aware credential management workspace. It lets teams share logins to company accounts without circulating passwords in Slack or email — and it plugs directly into your people operations so that when someone leaves, their access goes with them.

What makes it different from a password manager

Standard password managers (like Bitwarden or 1Password) are designed for individuals. Sharing is bolted on.

Account Sharing in Optserv is designed from the start for team-level, HR-integrated sharing:

• HR-aware — shared items are linked to your Optserv company. When someone is offboarded, you can revoke their access across all shared credentials.
• Access lists per item — each credential has its own access list. You control exactly who can see what.
• Encrypted end-to-end — credentials are encrypted client-side before storage. Optserv never sees plaintext credentials.

When to use it

Account Sharing is for company accounts that multiple people need to access:

• Social media accounts (Instagram, LinkedIn, Twitter/X)
• Vendor dashboards without SSO (software licenses, analytics tools)
• Shared admin logins for services that don't support per-user accounts
• API keys and service credentials shared across a team

For accounts where each person should have their own login, use per-user credentials instead — Account Sharing is for genuinely shared access.

Enabling Account Sharing

Account Sharing is not enabled by default. An Admin must enable it in company settings. Once enabled, the /accounts route becomes accessible to all staff.

Access model

Within Account Sharing, access control works at two levels:

1. Role level — Admins and HR can see all company items. Other staff see only items shared with them.
2. Item level — Each shared credential has an owner and an access list. The owner controls who can view/use that item.

See Security Model for how credentials are encrypted.

See Sharing & Offboarding for the operational workflow.