# Roles and vaults

**URL:** <https://forum.ansible.com/t/roles-and-vaults/19533>\
**Category:** Ansible Project\
**Created:** [October 17, 2015, 1:23am UTC](https://forum.ansible.com/t/roles-and-vaults/19533 "2015-10-17T01:23:17Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Flo](https://avatars.discourse-cdn.com/v4/letter/f/b38774/32.png) [@Flo](https://forum.ansible.com/u/Flo)\
**Post date:** [October 17, 2015, 1:23am UTC](https://forum.ansible.com/t/roles-and-vaults/19533/1 "2015-10-17T01:23:17Z")

</div>

Hi,

I’m wondering what the best practice would be for a role which should allow the user to set a password and to store their password inside an encrypted vault.

No one wants to store their passwords in plaintext. That’s what ansible-vault is made for. But I differ between data which can be public because I don’t care about it and data which should be keeped secret like passwords. So inside my host\_vars and group\_vars I store everything which can be public.  
I have another folder with secret\_vars where I crypt my passwords. But how can get them in my role available?

Cheers  
Flo