# the password to my vault **URL:** \ **Category:** Ansible Project\ **Created:** [June 9, 2023, 4:58pm UTC](https://forum.ansible.com/t/the-password-to-my-vault/38076 "2023-06-09T16:58:33Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![dbs34](https://avatars.discourse-cdn.com/v4/letter/d/8dc957/32.png) [@dbs34](https://forum.ansible.com/u/dbs34)\ **Post date:** [June 9, 2023, 4:58pm UTC](https://forum.ansible.com/t/the-password-to-my-vault/38076/1 "2023-06-09T16:58:33Z")
Hi All! Can the passowrd for my actual vault file as shown /etc/ansible/group\_vars/.vltfile.yml be encrypted? Will ansible auto decrypt it? My client vault file which holds the actual user-names and password is encryted but I never found or disceoverd it your password vault file can be from the docs. thank you! ---
**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\ **Post date:** [June 12, 2023, 5:45pm UTC](https://forum.ansible.com/t/the-password-to-my-vault/38076/2 "2023-06-12T17:45:48Z")
short answer: no long answer: yes, but ... you need to provide iit decrypted for ansible to use, this can just end up 'offsetting' the secret over and over as you chain them. Normally system permissions should be enough to keep the secret safe. For those that don't find this as enough you can store the secret elsewhere and use a 'vault secrets script' to retrieve it this lets you integrate with things like an HSM or other security devices/databses. > From docs ([https://docs.ansible.com/ansible/2.8/user\_guide/playbooks\_vault.html](https://docs.ansible.com/ansible/2.8/user_guide/playbooks_vault.html)): If you are using a script instead of a flat file, ensure that it is marked as executable, and that the password is printed to standard output. If your script needs to prompt for data, prompts can be sent to standard error.