Customers can only "View All" and "View Mine" on credentials marked public, but are unable to update or add new entries.

Please add these options to Customer Portal Permissions:
Credentials - Delete
Credentials - Edit
Credentials - New

All new entries made by Customer can be listed as Public, but this way they can share passwords with MSP in a secure manner.