Encrypted At Rest · AES-256-GCM
Per-Business Backend · Locked Down
Every client's social/marketing/billing credentials in one place — masked by default, revealed only with manager approval, auto-rehidden in 5 minutes. Same pattern as 1Password.
🛡
Encrypted with AES-256-GCM · Same standard as 1Password · MakelyOS staff cannot see plaintext without approval · Every access logged · Print/PDF always shows [REDACTED]
Stored Credentials
412
across 47 businesses
Reveals Today
23
avg session 3m 14s
OAuth Active
198
48% of platforms
Pending Approvals
4
manager attention needed
🔗
OAuth where possible — Google · Facebook · Instagram · Yelp · TripAdvisor · Stripe all use OAuth tokens (no password sharing). For legacy platforms (WordPress · custom CMS · older booking tools), we use the encrypted vault below.
🔐 Mindful Wellness Spa · Backend Credentials
10 platforms · Click 👁 to request reveal · Manager approval required
Platform
Username
Password
Status
Last Verified
Last Access
Actions
🔍 Google Business Profile
OAuth · no password stored
🔒 oauth-token
🔒 —
Connected
05/25/2026
05/26/2026
Open ⚙
📘 Facebook Page
OAuth · 60-day refresh
🔒 oauth-token
🔒 —
Re-auth in 12d
05/24/2026
05/26/2026
Refresh ⚙
📷 Instagram Business
via Meta OAuth
🔒 oauth-token
🔒 —
Connected
05/25/2026
05/26/2026
Open ⚙
⭐ Yelp Business
Yelp Fusion API
🔒 api-key
🔒 —
Connected
05/24/2026
05/25/2026
Open ⚙
🏨 TripAdvisor Owner
vault · legacy login
🔒 •••••l@mindfulwell.com
🔒 ••••••••a8K2
Vault-only
04/15/2026
05/22/2026
👁 Reveal 📋 ✏ 🗑
📝 WordPress Admin
vault · self-hosted site
🔒 •••••admin_mind
🔒 ••••••••P3x9
Tested 24h ago
05/25/2026
05/25/2026
👁 Reveal 📋 ✏ 🗑
📧 Mailchimp
API key + vault password
🔒 •••••l@mindfulwell.com
🔒 ••••••••mC4q
Connected
05/23/2026
05/24/2026
👁 Reveal 📋 ✏ 🗑
🎨 Canva Pro
vault · brand kit
🔒 •••••l@mindfulwell.com
🔒 ••••••••cV7r
Tested 3d ago
05/22/2026
05/24/2026
👁 Reveal 📋 ✏ 🗑
📅 Calendly Premium
vault · booking flow
🔒 •••••l@mindfulwell.com
🔒 ••••••••cL5m
Broken · re-auth
04/10/2026
05/20/2026
👁 Reveal 📋 🔄 🚨
💳 Stripe Connect
OAuth · webhooks
🔒 oauth-token
🔒 —
Connected
05/26/2026
05/26/2026
Open ⚙
+ Add Credential
Showing 10 of 10 · Last sync: just now
👥 Who Can Do What
Default Employee
✅ View masked credentials
✅ Request reveal (needs approval)
✅ Add new credential
❌ Modify · request only
❌ Delete · request only
❌ Export · never
Manager
✅ Everything Employee can do
✅ Approve reveals
✅ Approve modify/delete
✅ View per-client audit log
❌ Bulk view all · never
❌ Export · never
Admin
✅ Everything Manager can do
✅ Bulk audit (logged)
✅ Emergency override (with reason)
✅ Secure export (encrypted bundle)
✅ Rotate encryption keys
✅ Configure vault policy
📜 Audit Log · Last 15 Events
Every credential access logged · immutable storage · forensic-grade
Timestamp
Actor
Action
Target
Approver
Session
05/26/2026 09:42
Maria L
REVEAL
WordPress · Mindful
Carlos R
4m 12s
05/26/2026 08:31
Carlos R
ADD
TikTok · Bella Vista
—
—
05/25/2026 17:28
Linh P
REVEAL
Mailchimp · Ocean Breeze
Carlos R
2m 51s
05/25/2026 14:09
Diego M
MODIFY
Canva · Duval Wine
Carlos R
—
05/25/2026 11:05
Sarah K
REVEAL
TripAdvisor · Serenity
Carlos R
1m 47s
05/24/2026 16:22
Maria L
REVEAL
Calendly · Mindful
Carlos R
5m 00s · expired
05/24/2026 10:14
Jessica P
ADD
Yelp · Tropical Touch
—
—
05/23/2026 18:41
Anthony W
DELETE
Old WP login · Pure Zen
Boss
—
05/23/2026 14:33
Carlos R
REVEAL
Mailchimp · Bella Vista
self · admin
3m 12s
05/22/2026 11:50
Maria L
REVEAL
WordPress · Mindful
Carlos R
4m 51s
05/22/2026 09:18
Linh P
MODIFY
Canva · Tranquility
Carlos R
—
05/21/2026 17:02
Diego M
REVEAL
TripAdvisor · Duval Wine
Carlos R
2m 28s
05/21/2026 15:44
Sarah K
ADD
Pinterest · Serenity
—
—
05/21/2026 11:36
Jessica P
REVEAL
Yelp · Pure Zen
Carlos R
1m 12s
05/20/2026 16:55
Maria L
REVEAL
Mailchimp · Mindful
Carlos R
3m 41s
✓ AES-256-GCM encryption at rest
✓ OAuth wherever supported
✓ Time-limited reveals (5 min auto)
✓ Manager approval required
✓ Full immutable audit log
✓ Print shows [REDACTED]
✓ Cloudflare R2 encrypted backups
✓ Recovery key escrowed with counsel