---
title: "Credentials"
description: "Store the credentials Connection Managers use to sign in to CIs."
product: "Guardian"
edition: "Essentials"
type: "workflow"
url: "https://docs.cloudhouse.com/guardian/essentials/scans/credentials/"
---
# Credentials

**Credentials** holds the reusable sign-in details your Connection Managers use to scan CIs agentlessly. Store a credential once and use it for every CI it applies to.

## Add a credential

1. Open **Credentials** and add a credential.
2. Give it a name and say what it's for (for example, *Windows service account*).
3. Enter the username and password, and choose the **Connection Manager group** that will use it.
4. Save. The credentials list shows where each one is held and which CIs use it.

## Use a vault

To keep secrets in your own vault, select **Connect Delinea Secret Server**. A credential held there is listed with where it's held, so you can tell vault credentials from those stored in Guardian.

## Change or move a credential

You can edit a credential's details, or move it to another Connection Manager group. Moving it to another group needs the password again.