Two modes of sharing
EmpowerNow supports two independent sharing mechanisms for secrets. Both let you share a secret value without exposing your full secrets inventory to the recipient.
| Mode | How it works | Recipient needs an account? |
|---|---|---|
| Time-limited link | Generates a short URL that reveals only the secret value. The link expires automatically after the configured duration. | No β anyone with the link can view the value |
| Grant-based share | Grants a named EmpowerNow user read access to this specific secret. The recipient sees it in their "Shared with me" section. | Yes β recipient must be an EmpowerNow user |
What gets shared β and what doesn't
A share exposes only the value of the secret. The secret's name, path, tags, and other metadata are never visible to the recipient via a share link. For grant-based shares, the recipient can see the secret name in their "Shared with me" list but cannot browse your full secrets tree.
Sharing a secret does not grant the recipient any other access to your secrets. It is a targeted, audited, revocable disclosure of one value β not an access grant to the plugin or vault path.
Copy and send the share URL
After clicking Generate share link, the modal transitions to a success state showing the one-time share URL. Copy it immediately and send it to your recipient via a secure channel (encrypted messaging, password manager share, etc.).
What the recipient sees
When a recipient opens the link, they see a minimal viewer page showing only the secret value (and optional message if provided). They do not need an EmpowerNow account. The page shows the remaining time before expiry and a single Copy value button. After the link expires, the page shows an "This share has expired" message.
Never send a share link via unencrypted email or public chat. Use encrypted messaging, a password manager share feature, or an internal secure channel. The link itself does not require authentication.
View all active shares on a secret
Open any secret's detail panel and click the Shares tab. This tab lists every active share associated with the secret β both time-limited links and grant-based shares β along with their status and expiry.
| Type | Created | Expires | Recipient | Status | Actions |
|---|---|---|---|---|---|
| π Link | 2026-04-28 09:14 | 2026-04-29 09:14 | β | Active | Revoke |
| π Grant | 2026-04-27 14:30 | No expiry | jane.doe@company.com | Active | Revoke |
| π Link | 2026-04-20 11:00 | 2026-04-21 11:00 | β | Expired | β |
Revoke a share
Click Revoke on any active share row. For time-limited links, the URL is immediately invalidated β anyone opening it will see a "Share not found or revoked" message. For grant-based shares, the recipient's access is removed immediately; the secret disappears from their "Shared with me" list.
You cannot restore a revoked share. If you need to re-share after revoking, create a new share from the Share modal.
| Column | Description |
|---|---|
| Type | Link (time-limited URL) or Grant (named user access) |
| Created | Timestamp when the share was created |
| Expires | Expiry timestamp or "No expiry" for open-ended grants |
| Recipient | Email address for grant shares; blank for anonymous links |
| Status | Active (live), Expired (auto-expired), Revoked (manually invalidated) |