Yes. Wing has mutliple methods to interact with credentials. Here, we'll discuss them and explain how they work.


1. Wing's "Credentials" product

Wing's "Credentials" product is available from within the Wing app, and enables you to add your credentials to particular services that don't allow you to invite Wing as a user. Wing Credentials stores all information with Google's Secret Manager service, as part of Google Cloud's Identity & Security product line. This means that all credentials are saved using the same level of encryption that Google uses to secure its most sensitive data, specifically, using AES-256 encryption, and TLS in transit. Google has authored a whitepaper geared towards CIOs that explain the level of security associated with their cloud products. Please note, because Wing uses Google Secret Manager to store all credentials, Wing's systems are never in receipt of your credentials, only a hash that we use to retrieve the secret from Google, and therefore, if any breach were to occur at Wing, your credentials are still safe with Google. In addition, both Wing and Google maintain audit logs, Google maintains logs of all access to your stored credentials from any party, while Wing maintains audit logs of which stakeholder requested access. If you ever decide to leave Wing, all stored credentials are deleted from Google Secret Manager, and therefore Wing Credentials. You also have the ability to edit or delete credentials at any time. 


2. Using a password manager that you already use

If you're a user of 1Password, Lastpass, or similar, you can share access to your Wing assistant, and revoke it at any time.


3. Share access instead of credentials

If you'd like to avoid credentials all together, usually, most software will allow you to "Share" or "Add" a user to your account (e.g. Trello, Airtable, Google Docs, Gmail, etc.) just let your assistant know that you've added them to a particular piece of software, and we'll be on top of it! If you ever decide to leave Wing, your account's inbox & pseudo-inbox is deleted, along with any accesses that were granted. In addition, you are free to revoke access to any resource at any time.