--- updatedAt: 2026-03-24T21:22:15.000Z --- # Secrets Safe: Overview | BI Cloud ## What is Secrets Safe? Secrets Safe is a secure solution for storing and managing secrets in a controlled, auditable environment. Password Safe administrators can assign groups in BeyondInsight to safes. Each safe operates as an isolated space where users can securely manage secrets within that safe. Key features include: * **Ownership and Access Control**: Ownership of secrets can be managed by anyone who is a current owner of the secret or has the Manage Safe permission. Assignment of permissions is safe-wide and can not be done on individual secrets. * **Permissions**: Safes provide granular control over permissions, allowing users or groups to be assigned specific permissions that define how they can interact with secrets they do not own. * **Read-only access**: Users can view, retrieve, and organize secrets into folders but cannot modify them. * **Ease of Access**: Secrets can be quickly found and accessed using search and filtering tools. ## How is Secrets Safe useful? Secrets Safe minimizes the risk of unauthorized access to secrets. Each safe ensures that secrets are stored securely and accessed only by authorized users. Secrets Safe supports three different types of secrets: credential, file, and text. ## How do I access Secrets Safe? 1. Use a browser to sign in to your BeyondInsight/Password Safe URL.\ This URL is provided in the BeyondTrust welcome email and includes your site URL followed by /login. 2. From the left menu, click ![Secrets Safe icon](https://files.readme.io/bac6df305c1b79074422693d8e0185bcc3b50e39f92329d0296281322af4b783-secrets-safe.png).\ The **Secrets Safe** page displays. ## The Secrets Safe page Use the Secrets Safe page to view at-a-glance data about your secrets. [block:image] { "images": [ { "image": [ "https://files.readme.io/1318ca60e8d300b58535924349be13c3e5f7586fdab51a157f3e979bc15d9465-cloud-bi-secrets-safe.png", null, "Secrets Safe for Cloud Home Page" ], "align": "center" } ] } [/block] 1. **Left menu:** Easy access to all pages in BeyondInsight/Password Safe, including the [Home](https://docs.beyondtrust.com/bips/docs/cloud-welcome-to-beyondinsight), [Assets](https://docs.beyondtrust.com/bips/docs/bi-cloud-assets), [Smart Rules](https://docs.beyondtrust.com/bips/docs/bi-cloud-smart-rules), [Discovery Scanner](https://docs.beyondtrust.com/bips/docs/bi-cloud-discovery-scans), [Management Systems](https://docs.beyondtrust.com/bips/docs/bi-cloud-managed-systems), [Managed Accounts](https://docs.beyondtrust.com/bips/docs/bi-cloud-managed-accounts), [Password Safe](https://docs.beyondtrust.com/bips/docs/welcome-to-ps-cloud), [Secrets Safe ](https://docs.beyondtrust.com/bips/docs/bi-cloud-secrets-safe), [Analytics and Reporting](https://docs.beyondtrust.com/bips/docs/bi-analytics-and-reporting), [Configuration](https://docs.beyondtrust.com/bips/docs/bi-cloud-config), and [About ](https://docs.beyondtrust.com/bips/docs/bi-cloud-about)pages. 2. **Header:** Navigate to your favorite pages, view your notifications, access your connected apps, and set your account preferences. 3. **Safes > Search:** View and search for safes. 4. **Create New Safe:** click to create a new safe. 5. **Secrets > Filter By:** Filter by ID, Title, Type, Description, URL, Username, File Name, Owner(s), Folder, or Notes. 6. **Add Secret**: Click to add a new secret. 7. **Grid display preferences:** Set display preferences on the Secrets grid using the following options represented by icons above the grid: * Click ![Refresh icon](https://files.readme.io/f63f0bc8c01bb27da11ae637407e0b19aaa5cc7d3ee52946b2e392861d928afc-refersh.png) to refresh the list, ![Download icon](https://files.readme.io/3cc3e35e3ac6a72ce0bc3747df69a1c29f39b1cb9e45570604098be3bff4b1eb-download-icon.png)to download the list to a .csv file, ![Column chooser icon](https://files.readme.io/aa3bbd3ab81173c9982270aa4d0662090ee69612d772287dcce16d6e49ac18c9-column-chooser.png) to select which columns to display on the page, ![Settings icon](https://files.readme.io/1da1862e7b8565ca38a623a35c566249525c7215d7a8fce5c316680cbc54d44d-icon-grid.png) to configure your page display, and![Expand icon](https://files.readme.io/6e2e6f15ab6f9a86c455c6a0acc275b99f59d48343d73024c662e0d258a4da8c-expand.png)to expand the grid. 8. **Secrets Safe list columns:** >
Column Names > > \- ID > > * Title > * Type > * Description > * URL > * Username > * File Name > * Owner(s) > * Folder > * Notes > >
9. **Secrets Safe grid:** Displays information based on filter selections. 10. **List navigation options:** Navigate in the Secrets Safe secrets list. > 🚧 Important information > > Upon upgrade to BeyondInsight/Password Safe 24.3: > > * **Ownership**: Secrets can now be owned by both users and groups simultaneously. Ownership takes precedence over safe-level permissions, provided the user has read access to the safe. > * **Safes**: Root folders are now called safes. They are no longer created or removed by assigning the "Secrets Safe" feature permission. > * **Admin Access:** BeyondInsight Administrators no longer have default access to all safes. They must be explicitly assigned permissions to safes and can only see safes they are part of via the team folder group. > * Any existing API script that rely on administrators having full access to safes will fail unless they are assigned access to the safes. > * **Show All Safes:** A new toggle allows administrators to view all safes. > * **Permissions Management:** Only BeyondInsight Administrators can manage migrated safe permissions by default. Users and groups can manage safes once granted "Manage Safe" permissions. > * **Read Access:** Users can only view safes and their contents if they have read access. > * **Team Folder Group:** On upgrade, the group that created a team folder is automatically granted "Create" and "Read" permissions to the new safe. This does not apply to safes created post-upgrade. For configuration of Secrets Safe, see [Secrets Safe: Configure](https://docs.beyondtrust.com/bips/v25.3/docs/secrets-safe-configure-bi-cloud).