Why this exists and why it's different
Every organisation I worked with had the same problem. Credentials lived in the wrong place. Work passwords in personal vaults. No way to rotate everything when someone left. A single admin who could do anything without oversight. And consumer password managers that treated "team" as a folder permission, not an architectural boundary.
The enterprise tools that got the architecture right were priced and complexified out of reach for the organisations that needed them most. A 50-person company can't afford CyberArk. They shouldn't have to.
HexVault is built on a simple principle: the separation between personal, family, and organisation credentials should be cryptographic, not just a policy. When someone leaves, revoking their access should be mathematically complete, not dependent on an admin remembering to click the right button.
Every feature — the multi-party approval, the structured offboarding, the anomaly detection, the per-entry key derivation — comes directly from real incidents and gaps I encountered doing this work professionally.