Skip to content

flow vault create

Create a new vault.

shell
flow vault create NAME [flags]

Examples

shell
flow vault create myvault --type age --set
flow vault create myvault --type aes256 --key-env VAULT_KEY
flow vault create myvault --type keyring

Options

FlagTypeDescription
-c, --configstringFile path to read the external vault's configuration from. The file must be a valid vault configuration file.
-h, --helphelp for create
--identity-envstringEnvironment variable name for the Age vault identity. Only used for Age vaults.
--identity-filestringFile path for the Age vault identity. An absolute path is recommended. Only used for Age vaults.
--key-envstringEnvironment variable name for the vault encryption key. Only used for AES256 vaults.
--key-filestringFile path for the vault encryption key. An absolute path is recommended. Only used for AES256 vaults.
-o, --outputstringOutput format. One of: yaml, json, or tui.
-p, --pathstringDirectory that the vault will use to store its data. If not set, the vault will be stored in the flow cache directory.
--recipientsstringComma-separated list of recipient keys for the vault. Only used for Age vaults.
-s, --setSet the newly created vault as the current vault
-t, --typestringVault type. Either unencrypted, age, aes256, keyring, or external (default "aes256")

Options inherited from parent commands

FlagTypeDescription
-L, --log-levelstringLog verbosity level (debug, info, fatal) (default "info")
--syncSync flow cache and workspaces

See also