A credential vault is an encrypted container for storing passwords, API keys, recovery codes, and other secrets. In practice, it is the protected core of a password manager or secrets manager: the user unlocks it with a master password or another trusted factor, and the vault then releases individual credentials only when needed.
Credential vaults matter because they reduce password reuse, weak memorization habits, and the temptation to keep secrets in plain text notes or browser storage. In attacks, criminals may try to steal the vault file, guess the master password, phish the unlock credentials, or install malware that captures secrets after the vault is opened. Defenders rely on strong encryption, multi-factor authentication, device security, and regular rotation of high-value secrets. A well-used vault supports safer account hygiene by making unique, random credentials easier to manage at scale.