A Secret is an encrypted record containing a name, URL, username, password, and optional notes. Vault encrypts each Secret using AES-256 before it leaves the browser, so only authorised users with the correct decryption key can read the plain-text value. Each Secret belongs to at least one Chamber (folder) and can be individually shared, tagged, or linked to a TOTP entry. Access logs record every view, copy, and edit against the Secret ID.
Create a Secret whenever a credential must be stored, shared, or audited centrally rather than held in someone’s browser or a spreadsheet. One Secret per service is the correct granularity: avoid bundling multiple unrelated logins into one record, because sharing is controlled at the Secret level. If a credential is personal and never shared, a personal vault Secret still provides audit history and breach-alert coverage.
Secrets inherit the Password Policy of their Chamber unless a policy is applied directly. Moving a Secret between Chambers may change which users can access it, so audit permissions before migrating. Deleted Secrets are soft-deleted and can be restored by an admin within the retention window. The Secret count limit depends on your Zoho Vault plan; free tiers cap at a lower number than paid plans. Always verify the URL field is correct before enabling auto-fill, to prevent credential phishing via mismatched sites.
Yes. A Secret can hold a username, URL, password, and a free-text notes field. The notes field is also encrypted and is suitable for storing supplementary information such as security questions, PIN codes, or setup instructions. However, for large binary files or documents, Secure Notes or external storage is more appropriate.
Yes. Every view, copy-to-clipboard, and password reveal action against a Secret is logged with a timestamp, user identity, and IP address. Admins can export these logs for compliance reporting. This audit coverage is one of the primary reasons organisations move credentials from shared spreadsheets into Vault.
Aaxonix is a certified Zoho implementation partner based in Pune. Architecture-first, no surprises.