Record Types
SyVault supports 21 distinct record types, each with structured fields tailored to the kind of data being stored. Every record is encrypted with its own unique Data Encryption Key (DEK) using AES-256-GCM. The DEK is wrapped with the parent Vault Key.
The most common types are documented in detail below. See Additional Record Types at the bottom of this page for the full list of 21.
Login
The most common record type. Stores website and application credentials.
| Field | Description |
|---|---|
| Name | Display label (e.g., "GitHub") |
| Username | Login identifier (email, username, or phone) |
| Password | The credential password (masked by default) |
| URL(s) | One or more URLs for autofill matching. Supports wildcards. |
| TOTP | Time-based one-time password secret. Displays live 6-digit code with countdown. |
| Notes | Free-form encrypted text |
| Custom Fields | Key-value pairs (text, hidden, or boolean) |
Secure Note
Encrypted free-form notes for any sensitive text.
| Field | Description |
|---|---|
| Name | Display label |
| Content | Multi-line encrypted text. Ideal for recovery codes, license keys, PINs, or instructions. |
Payment Card
Store credit and debit card details for online purchases.
| Field | Description |
|---|---|
| Name | Card label (e.g., "Visa ending 4242") |
| Cardholder Name | Name as printed on the card |
| Card Number | Full card number (displayed masked, last 4 visible) |
| Expiry Date | MM/YY format |
| CVV | Security code (always hidden, copy only) |
| PIN | Optional ATM PIN |
| Billing Address | Optional linked address |
| Notes | Free-form notes |
Identity
Personal identity information for form filling.
| Field | Description |
|---|---|
| Name | Display label (e.g., "Personal", "Work") |
| First Name / Last Name | Legal name |
| Email address | |
| Phone | Phone number |
| Address | Street, city, state/province, postal code, country |
| Date of Birth | Optional |
| Company | Optional employer or organization |
| SSN / National ID | Optional, always hidden |
Bank Account
Securely store banking details.
| Field | Description |
|---|---|
| Name | Account label (e.g., "Chase Checking") |
| Bank Name | Financial institution |
| Account Number | Account identifier (masked) |
| Routing Number | Bank routing / sort code |
| SWIFT / BIC | International bank code |
| IBAN | International bank account number |
| Account Type | Checking, savings, business |
| PIN | ATM or telephone banking PIN |
| Notes | Free-form notes |
SSH Key
Store SSH key pairs for server authentication.
| Field | Description |
|---|---|
| Name | Key label (e.g., "Production Bastion") |
| Private Key | PEM-encoded private key (always hidden) |
| Public Key | Corresponding public key |
| Passphrase | Key passphrase, if any |
| Fingerprint | Auto-computed from the public key |
| Notes | Free-form notes |
API Key
Store API keys, tokens, and secrets for developer services.
| Field | Description |
|---|---|
| Name | Service label (e.g., "Stripe Production") |
| Key | The API key or token (hidden) |
| Secret | API secret, if applicable (hidden) |
| Endpoint | API base URL |
| Expires | Optional expiry date |
| Notes | Free-form notes |
Database
Store database connection credentials.
| Field | Description |
|---|---|
| Name | Database label (e.g., "Prod PostgreSQL") |
| Type | PostgreSQL, MySQL, MongoDB, Redis, MSSQL, etc. |
| Host | Hostname or IP |
| Port | Connection port |
| Database Name | Schema / database name |
| Username | Database user |
| Password | Database password (hidden) |
| Connection String | Optional full connection URI |
| Notes | Free-form notes |
Server
Store server and infrastructure access details.
| Field | Description |
|---|---|
| Name | Server label (e.g., "web-prod-01") |
| Host | Hostname, IP, or FQDN |
| Port | SSH or RDP port |
| Username | Login user |
| Password | Login password (hidden) |
| Linked SSH Key | Reference to an SSH Key record |
| OS | Operating system |
| Notes | Free-form notes |
Certificate
Store TLS/SSL certificates and their private keys.
| Field | Description |
|---|---|
| Name | Certificate label (e.g., "*.example.com 2026") |
| Certificate | PEM-encoded certificate |
| Private Key | PEM-encoded private key (hidden) |
| CA Chain | Intermediate/root CA certificates |
| Issued To | Subject CN/SAN |
| Issued By | Issuer CN |
| Valid From / To | Certificate validity period |
| Notes | Free-form notes |
WiFi
Store wireless network credentials.
| Field | Description |
|---|---|
| Name | Network label (e.g., "Office 5G") |
| SSID | Network name |
| Security | WPA2, WPA3, WEP, Open |
| Password | Network password (hidden) |
| Hidden Network | Whether the SSID is broadcast |
| Notes | Free-form notes |
Additional Record Types
The following record types are also supported. Each has structured fields similar to the detailed types above, and uses the same per-record DEK encryption.
| Record Type | Purpose |
|---|---|
| Software License | License keys, versions, purchase dates, max device counts |
| Passport | Passport number, nationality, issue/expiry dates, place of birth |
| Driver's License | License number, class, issuing state/country, expiry |
| Health Insurance | Provider, plan, member ID, group number, policy holder |
| Membership | Club/loyalty program member IDs, membership dates |
| Contact | Name, company, email, phone, address, website |
| Address | Labeled postal address (Home, Work, etc.) |
| File Attachment | Encrypted binary file stored in the vault |
| Environment Variable | Key/value pair for Secrets Manager (sy:// notation) |
| Custom | Extensible record with user-defined field schema |
The canonical enum is defined in crates/core/src/vault/types.rs (RecordType).
Every record type supports custom fields. Add key-value pairs with a type of Text (visible), Hidden (masked like passwords), or Boolean (toggle). Custom fields are encrypted identically to built-in fields.