Access Postman Vault

With Postman Vault, you can store secrets in several different vault types, including Postman Local Vault and Postman Shared Vault. When you first open your local vault, Postman generates a vault key for you to save in a secure location to unlock it later. Your vault key isn’t synced to the Postman cloud.

Postman Local Vault and Postman Shared Vault are supported on the Postman desktop and web apps. Both vault types are supported in Local View and Cloud View on the Postman desktop app.

Postman Local Vault

Your local vault is created by default and you can’t delete it. With your local vault, you can store vault secrets in your local instance of Postman. Only you can access vault secrets in your local vault, and they aren’t synced to the Postman cloud. Local vault is supported in all workspace types.

To access your local vault, do the following:

1. Open a workspace.
2. Click Vault in the footer, and select Local Vault.
3. Create a vault key, if you haven’t already.

Once you create your vault key, you’ll use it to unlock your local vault each time you sign in to Postman. Learn more about unlocking your local vault.

With your local vault, you can also link vault secrets with secrets stored in an external vault, like 1Password. Learn more about Postman Vault integrations.

Create your vault key

Save or download your vault key to a secure location so you can unlock your Postman Vault later. Your vault key isn’t synced to the Postman cloud. You can store your vault key in your system’s password manager, such as Keychain Access on macOS, so Postman automatically enters your vault key when you sign in. You can reset your vault key if you lose it.

To save your vault key, do the following:

1. When you open your local vault for the first time, save or download your vault key to a secure location. You can do the following to save your vault key:

   • Click Copy Vault key to copy your vault key to your clipboard.
   • Click Download Vault key to download your vault key.

2. By default, Postman stores your vault key to your system’s password manager. If you don’t want to store your vault key in your system’s password manager, clear the checkbox next to Save this key to native password manager.

   If you’re using the Postman web app, you must use the Postman Desktop Agent to save your vault key to your system’s password manager.

3. Click Open Vault.

You can copy and download your vault key again later. Click Settings in the upper right corner, then copy or download your vault key from the Settings tab.

Once your vault key is generated, you’ll use it to unlock your local vault when you sign in.

Reset your vault key

You can reset your vault key if you lose it. Vault secrets are deleted from your Postman Local Vault when you reset your vault key.

To reset your vault key, do the following:

1. Sign out and sign back in to Postman.
2. Open your local vault.
3. Click Reset vault.
4. Click Reset Vault to generate a new vault key.
5. Save your vault key.

Unlock your local vault

Each time you sign in to Postman, you must enter your vault key to unlock your Postman Local Vault. You can enter your vault key in the following ways, depending on how you saved your vault key:

• If you stored your vault key in your system’s password manager, Postman automatically retrieves and enters your vault key when you sign in. Make sure to use the Postman Desktop Agent if you’re using the Postman web app.
• If you stored your vault key to your own secure location, you must manually enter your vault key and click Open Vault.

Postman Shared Vault

Each internal workspace and Partner Workspace has one shared vault that your teammates can access. With a shared vault, your vault secrets are synced to the Postman cloud so you can share vault secrets across Postman apps and machines. This also enables you to use vault secrets in cloud-based Postman features such as monitors and flows.

For Enterprise plans, Postman Shared Vault is turned off by default for your team’s workspaces. Admins can turn on shared vault, making it available in internal workspaces and Partner Workspaces. Admins can manage which workspaces have a shared vault. Learn how to manage access to shared vault.

Postman generates and manages encryption keys for shared vaults. Vault secrets stored in a shared vault are end-to-end encrypted.

To access your workspace’s shared vault, do the following:

1. Open a workspace.
2. Click Vault in the footer, and select Shared Vault.

Manage access to shared vault

As an Admin on an Enterprise plan, you can manage which workspaces have a shared vault. Shared vault is turned off for your team’s workspaces by default. Once you turn on shared vault for your team’s workspaces, it’s available in internal workspaces and Partner Workspaces. When you turn on shared vault for a workspace, all members of that workspace can access the shared vault.

To turn on shared vault for your internal workspaces and Partner Workspaces, do the following:

1. Select Organization or Team > Organization or Team settings in the Postman header.
2. Click Shared Vault in the sidebar.
3. Click Turn on in the upper right corner.

To manage which workspaces have a shared vault, do the following:

1. Select Organization or Team > Organization or Team settings in the Postman header.

2. Click Shared Vault in the sidebar.

3. You can take the following actions to locate a workspace:

   • Use the search bar to search for a workspace by name.
   • Click the Type dropdown to filter workspaces by type.
   • Click the Created by dropdown to filter workspaces by creator.

4. Click the toggle next to a workspace to turn on or off access to a shared vault. To select all workspaces, click the checkbox next to the Workspace column and click Turn on or Turn off.

You can click Turn off in the upper right corner to turn off shared vault for all workspaces. If the Move to Shared Vault Local Secret Protection policy is enabled for a workspace type, you can’t turn off shared vault. Learn more about Local Secret Protection policies.