An encrypted file used to store sensitive information, such as database passwords. A separate file contains a key that is used to decrypt the data in the vault file.