---
url: https://docs.mochiexec.io/reference/cli/mochi_vault_create.md
description: Create a new vault.
---

# mochi vault create

Create a new vault.

```shell
mochi vault create NAME [flags]
```

## Examples

```shell
mochi vault create myvault --type age --set
mochi vault create myvault --type aes256 --key-env VAULT_KEY
mochi vault create myvault --type keyring
```

## Options

| Flag | Type | Description |
|------|------|-------------|
| `-c, --config` | `string` | File path to read the external vault's configuration from. The file must be a valid vault configuration file. |
| `-h, --help` |  | help for create |
| `--identity-env` | `string` | Environment variable name for the Age vault identity. Only used for Age vaults. |
| `--identity-file` | `string` | File path for the Age vault identity. An absolute path is recommended. Only used for Age vaults. |
| `--key-env` | `string` | Environment variable name for the vault encryption key. Only used for AES256 vaults. |
| `--key-file` | `string` | File path for the vault encryption key. An absolute path is recommended. Only used for AES256 vaults. |
| `-o, --output` | `string` | Output format. One of: yaml, json, or tui. |
| `-p, --path` | `string` | Directory that the vault will use to store its data. If not set, the vault will be stored in the flow cache directory. |
| `--recipients` | `string` | Comma-separated list of recipient keys for the vault. Only used for Age vaults. |
| `-s, --set` |  | Set the newly created vault as the current vault |
| `-t, --type` | `string` | Vault type. Either unencrypted, age, aes256, keyring, or external (default "aes256") |

## Options inherited from parent commands

| Flag | Type | Description |
|------|------|-------------|
| `-L, --log-level` | `string` | Log verbosity level (debug, info, fatal) (default "info") |
| `--sync` |  | Sync flow cache and workspaces |

## See also

* [mochi vault](mochi_vault.md) — Manage sensitive secret stores.