Access grants: why new members start "pending"
The one extra step that keeps team sharing zero-knowledge — and how to complete it.
Last updated July 7, 2026
After someone accepts an invitation, they appear as pending — they can't open anything yet. An owner or admin then clicks Grant access on their row, and they become active.
Why the extra step? Because of how the encryption works — and it's worth understanding once:
Each workspace has its own encryption key. We never have it, so we cannot hand it to your new member — only an existing member can. When you click Grant access, your browser seals the workspace key specifically for the new member, using their personal lock. The sealed copy passes over our servers; the usable key never does. That's what keeps a shared workspace exactly as unreadable to us as your personal forms.
Practical rules that follow:
- Granting requires an active owner/admin with their vault unlocked — grants can't happen "automatically overnight".
- If you see a key changed warning on a member (rare — e.g. after they fully reset their vault), re-confirm with them personally before re-granting. The warning is the system refusing to trust silently on your behalf.
Tip
Invite and grant in the same sitting — the new colleague can start immediately, and you avoid a pending list.