Skip to main content

🗝️ Organisation Key

The Organisation Key protects every plan in your organisation. It is the reason your data belongs to you alone: whoever holds it holds the organisation's trust.

Think of your organisation as a building, and every protection plan as a locked room inside it. The Organisation Key is the key to the front door: until you hold it, you are not even inside, and no room door can be tried. Every room keeps its own lock and its own rules, but everything starts with entering the building.

How the Organisation Key and the Recovery Key work together

What the key does​

Every protection plan gets its own unique plan key, and the Organisation Key wraps each of them. It comes out at these moments:

  • Creating a plan: the key wraps the new plan key
  • Editing data: the key unwraps the plan, and wraps it again when you save
  • Revealing data: the key unwraps the plan key again
  • Distributing the key: your browser encrypts the key for a member's device

When the key is needed, SafeKey Mobile releases it into your browser. It does its work there, stays encrypted in your browser while you are signed in, and is removed when you sign out.

Without the Organisation Key, no plan in your organisation can be opened. Not by an attacker with a stolen database, and not by us.

How you get the key​

During setup, your browser generates an Organisation Recovery Key, which only you, the Organisation Owner, hold. The Organisation Key is derived from it in your browser and securely sealed to your linked phone using SafeKey Mobile.

Inheriti® can never read your keys. They never reach our servers in readable form: to verify your Organisation Recovery Key, we store only a non-reversible check value.

info

If you lose your Organisation Recovery Key and no device belonging to an Organisation Owner or Manager holds the Organisation Key anymore, the Organisation Key cannot be recovered. Learn more about recovery.