📖What it means

The one place credentials are kept, so that revoking or rotating a secret is a single act rather than a search. A secret outside the vault cannot be rotated, only discovered.

📖Easily confused with

[{"term": "Registry", "distinction": "The vault holds secrets; the registry holds the estate's records."}, {"term": "Credential", "distinction": "The vault is the store; a credential is one thing in it."}]

📖Also called

- credential store
- secret store

📖Filed under

Category: general.

Service: Security.