codai docs
Vault

Add a second device

Open your codai Vault on the Windows desktop app, on Android, on iPhone and in a terminal. For each one, how you unlock, which items you can add and edit there, and what is missing.

After you created the vault in the hub, every other device is added the same way: sign in to your codai account on it, open the vault, and type the Vault password and the Secret Key once. The device then keeps its own way to unlock (fingerprint, face, Windows Hello), so you do not type them again.

Have the recovery kit at hand: the Secret Key is on it.

Needs: Windows with Windows Hello set up (face, fingerprint or PIN), and the app signed in to your codai account.

  1. Open the Vault tab.
  2. Under Turn on Windows Hello for the vault, type the Vault password and the Secret Key, then choose Turn on.
  3. From then on, choose Unlock with Windows Hello.

Without Windows Hello the app shows "Windows Hello is not available on this device. Use the hub or codaid with your vault password." There is no password-only unlock in the desktop app, so the vault does not open in the desktop app on Linux.

What you can do

  • Add item (Ctrl+N): Login, Note or API key, saved in the Personal vault or in a shared vault you may write to.
  • Edit a login, a note or an API key. Windows Hello asks first.
  • Reveal and Copy: Windows Hello asks every time.
  • Delete any item, with Undo.
  • Approve agent requests, see Health, clean up duplicate passkeys, and act as the Windows passkey provider.

What is missing

  • Creating the vault, import, export and changing the vault password: use the hub.
  • Editing other item types (cards, SSH keys, passkeys and so on). They are listed and can be deleted.
  • Exposing an item to agents: an item added here is not visible to agents until you expose it in the hub.

The vault locks after 15 minutes without use. Keep unlocked while codai is focused stops the timer while the codai window is in front.

The hub does more

The hub is the only place with every item type. New item offers Login, API key, Environment (.env), SSH key, OAuth token, Secure note, Card and Identity. A Passkey or a File can be viewed and deleted in the hub, not edited.

The type of an item is fixed when it is created. To change it, delete the item and create a new one.

Check that it is the same vault

Every surface shows the Fingerprint of the vault: on the unlock form in the hub, in the desktop Vault tab, and after codaid vault enroll. It is the same short code everywhere, and the same one that is printed on your recovery kit.

Remove a device

The Devices tab in the hub lists the devices that can approve agent requests. Revoke stops a device from approving at once. It does not remove the items that device already holds, so also sign the device out of your codai account under Security → Devices.

On this page