> For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt.

# Personal Credentials

**Personal credentials** store login secrets that you own, such as a username and
password you enter manually when connecting to an asset. They belong only to your
account and are not added to the accounts managed by administrators.

After you save a credential, the web terminal offers it when you connect to that
asset with manual input, so the secret does not have to be typed again. You can
also test a saved credential or open a connection to its asset directly from this
page.

![Figure 1: The Personal Credentials list](/images/v5/jumpserver/v5_user_wb_pc_01.png)

## Prerequisites

- Your account is authorized for the asset you want to save a credential for. See
  [Authorizations](https://www.jumpserver.com/docs/features/console/policies/authorizations.md).
- The authorization allows manual input or the virtual account you intend to use.
  Otherwise the credential cannot be selected during the connection.
- The personal credential settings for the current organization can be read. If
  they cannot, creating and editing are disabled.


Important

If the page reports that personal credential settings could not be loaded,
switch to another organization and retry, or ask an administrator to check the
organization configuration. Creating and editing stay disabled until the
settings load correctly.

## Create a credential


1

Click 
**Create**
 to open the creation drawer.

2

In **Basic**, select an authorized asset, enter the username, choose the
secret type, and choose the protocol.

3

In **Secret**, enter the password, private key, or token. A secret is required
when creating a credential.

4

Optionally add a comment in 
**Other**
, then click 
**Submit**
.

![Figure 2: Creating a personal credential](/images/v5/jumpserver/v5_user_wb_pc_02.png)

| Field       | Description                                                                                                               |
| ----------- | ------------------------------------------------------------------------------------------------------------------------- |
| Asset       | Required. Only assets authorized for your account are listed, with name and address. It cannot be changed after creation. |
| Username    | Required. Login name used on the asset.                                                                                   |
| Secret type | Password, SSH key, or token. Choosing SSH key switches the secret field to a multi-line editor for a private key.         |
| Protocol    | Protocol used for the connection. It cannot be changed after creation.                                                    |
| Secret      | Required on create. When editing, leave it empty to keep the current secret.                                              |
| Comment     | Optional note.                                                                                                            |

## Use a credential when connecting

When you connect to an asset and select **Manual input** as the account:

- Choose a saved personal credential to log in with the stored secret.
- Or enter another username and password, then click **Save as personal
  credential** to store it for later.
- For a saved credential, use **Update saved password** to replace the secret, or
  **Cancel password update** to discard the change.

## Test, connect, edit, and delete

- **Test connection** checks whether the credential can log in to its asset. The
  action is only available for credentials that are active and have a saved
  secret; the result opens on the task page.
- **Connect** opens the web terminal in a new window at the credential's asset.
  Continue with [Client Overview](https://www.jumpserver.com/docs/features/client/index.md) to select the protocol, account, and
  connection method.
- Use the edit icon to change the username, secret type, secret, or comment. The
  asset and protocol stay locked. If you close the drawer without submitting, the
  page asks for confirmation so unsaved edits are not lost.
- Use the delete icon for a single credential, or select several rows and choose
  **Delete selected** in **More actions** for a bulk delete.

## Column reference

| Column       | Description                                                                            |
| ------------ | -------------------------------------------------------------------------------------- |
| Asset        | Asset name and address the credential belongs to                                       |
| Username     | Login name stored in the credential                                                    |
| Secret type  | Password, SSH key, or token                                                            |
| Protocol     | Protocol associated with the credential                                                |
| Status       | Latest connectivity status of the credential                                           |
| Secret saved | Whether a secret is currently stored                                                   |
| Active       | Whether the credential is enabled; only active credentials with a secret can be tested |
| Date updated | Last modification time                                                                 |
| Actions      | Test connection, connect, edit, or delete                                              |


Warning

Deleting a personal credential removes the secret you saved. The action cannot
be undone, and the next manual login requires entering or saving the secret
again.