GuideCredentials for stands
Reveal log
A password cannot be both usable and secret from the person using it: it is visible in the sign-in form and in the developer tools. So Talvedo does not forbid copying. Instead, every show, copy and Sign in is recorded.
What gets recorded
- Each Show, Copy and Sign in is a separate request to the server and goes to the credential's log and the workspace audit log, with the purpose.
- Changes of values and rights are recorded too, without the values themselves.
- Those who manage the credential see its log in the credential menu: Reveal log.
Other safeguards
- A shown value hides itself after 30 seconds and when you leave the page.
- More than 60 reveals per hour per person across the workspace are refused for a while. It does not get in the way of work but stops anyone from pulling everything out.
- Values never get into search, issue history, data export, AI, MCP, Slack, emails or notifications.
- A project lead can also require a code from email before a password is shown.
Updated October 12, 2026