Doriath
A password safe inside your . One vault per person, sharing per team, and a place for the passwords your systems use.
Every password in one safe place. Never in a chat group again.
Doriath gives every person a vault, every team a shared folder, and every system its own entry. Search finds a password from the Nextcloud search bar. Sharing works with the users and groups you already have.
The wifi code, the bank login, the supplier portal. One vault.
Today the wifi code sits in a WhatsApp group and the bank login on a sticky note. Instead, every password lives in your own vault, in folders you choose. Type a name in the Nextcloud search bar and the entry is there. Copy it, use it, done. Nobody forwards a password by chat again.
A colleague moves on. Every shared password is gone from their view.
Share a folder with a team and everyone in it can use the passwords inside. Add a password to the folder and the team has it. A colleague drops out of the group and their access ends by itself. Revoke one person in one click. No password reset round because someone walked out the door.
Ask a supplier for a password. It never travels by mail.
Send a supplier a one-time link. They drop the password in, it lands encrypted in your vault, and the link is dead. Need to hand one out instead? Send a message that only the receiver can open and that destroys itself after reading. Nothing sits in plain text in anyone's inbox.
Certificates that warn you before they run out.
Doriath keeps a list of every certificate with its end date and warns you before it expires. Certificates Doriath issued itself renew in one click. Passwords get an expiry policy too, so the ones that should change every year get flagged when the year is up. Weak, reused and leaked passwords show up on the health page.
The passwords your systems use, with an emergency exit for you.
Your website, your backup server and your accounting link each get their own entry. A system can put a password in but never read it back. For yourself: name a trusted colleague as emergency contact. If you are unavailable for longer than the wait period you set, they can open your vault, and you are told.
It works the way you work. And it keeps its own secrets.
Three things you would normally pay extra for. In Doriath they are built in.
A certificate is about to run out. You hear it thirty days ahead.
Today: a certificate expires on a Sunday and the website shows a red warning on Monday. Instead, Doriath watches every end date for you. Thirty days out you get a warning, and certificates Doriath issued renew in one click. Set an expiry policy on a folder and every password in it gets a reminder when its time is up. Mark it rotated and the clock starts again. Nothing forgotten, no spreadsheet of end dates.
Read the docsSharing per team, rules per organisation.
Sales shares the supplier portals, finance shares the bank logins, IT shares the servers. Each team gets its own folder, and membership follows the groups you already have in Nextcloud. Your admin sets the password rules once: minimum length, when a password has to change, who may register a system. Everyone else just opens the vault, in the browser or from the browser extension that fills in the login for them.
Read the docsThe assistant can warn you. It can never read a password.
Doriath is the one app that keeps the assistant out of the data on purpose. Your passwords are encrypted before they reach the server, so no assistant, no admin and no support engineer can ever read one. Today the assistant cannot touch the vault at all. On the roadmap: it may tell you which certificates run out this month and what is overdue for rotation. Names and dates only, never a value.
Meet the assistantWe ship the widgets you need
Install Doriath and the vault overview shows what needs you first: rotation due, what colleagues shared with you, and what changed while you were away. Design your own widgets with OpenBuild, or build your own dashboard from all your data with LaunchPad.
Search, users and groups. Already yours.
Doriath keeps its data to itself on purpose. What it borrows from Nextcloud is the part you already know: the search bar, the people, the groups, and the browser you work in.
Type "supplier portal" in the Nextcloud search bar and the entry shows up next to your files and mail. Only the name shows, never the value. Open it and the vault asks for your master password if it is locked. Copy, paste, back to work.
Read the docsBuild with it, ask about it, see it on your dashboard.
Partners shipping Doriath
Implementation, hosting, and integration partners that deliver Doriath to their customers. Pick the partner you already work with, or one whose stack matches yours.