tldr/pages/common/vault.md

# vault

> A CLI to interact with HashiCorp Vault.

- Create a new vault, requiring at least 2 out of 5 keyshares to unseal:

`vault init -key-shares={{5}} -key-threshold={{2}}`

- Unseal the vault by providing one of the keyshares. Repeat with necessary key-shares until unsealed:

`vault unseal {{key-share-x}}`

- Authenticate client against vault, using an authentication token:

`vault auth {{authentication-token}}`

- Store a new secret in the vault using the generic back-end called secret:

`vault write secret/{{hello}} value={{world}}`

- Read a value from the vault using the generic back-end called secret:

`vault read secret/{{hello}}`

- Seal the vault again:

`vault seal`