Moving credentials to another vault, not losing their ID/Reference

Hello,

From what I can see from my tests, the IDs don't change, but I think I understand what you mean.

If you have a structure where in VaultA, your WebsiteA points to CredentialA, and your WebsiteB points to CredentialB, if you move WebsiteA and CredentialB to VaultB, you will get two issues:

• The WebsiteA which is now in VaultB, will not be able to find CredentialA, which is still located in VaultA
• The WebsiteB which is still in VaultA, will not be able to find CredentialB, as it's now located in VaultB

The issue here is we're not leveraging the cross-vault credential linking, so while it's still referencing the ID of the entry, it doesn't know in what vault to look into, so it fails.
I will open a ticket so we can address this.

Regards,

Hello Hubert

Yes tha'ts right. We only did the second example, where we hade WebsiteB and CredentialB in in Vault a, an had to move the credential to Vault B. After that, we were not able to login to the entry anymore, as it could not find the credential in Vault-B, excatly.

As we need to move a lot of credential entries in the future, what you do you think about the time frame this can be addressed? I asks, just to know if we should do that know, and link them manually again, or just wait until this gets fixed.

And one other question, is there a way to convert a web-entry to a credentials entry, or just create a credentials entry from it? I though I saw this option sometime, but I could not find it anymore.

Best regards
Patrick

As we need to move a lot of credential entries in the future, what you do you think about the time frame this can be addressed? I asks, just to know if we should do that know, and link them manually again, or just wait until this gets fixed.

I checked with the dev team and we're hoping we can address this within the next 2 weeks. It depends on whether other higher priority tickets are completed on time or not.

And one other question, is there a way to convert a web-entry to a credentials entry, or just create a credentials entry from it? I though I saw this option sometime, but I could not find it anymore.

Depending on your needs, you can convert using a template, or extract the credential entry. Converting to a username/password entry will lose the URL, while extracting the credential entry will create a new credential entry and link the website to it.
You can access this by selecting your website, and right click > edit > quick actions > convert with template or extract credential entry.


Regards,

Hello,

We've added support for transfering entries from one vault to another. When transfering entries with linked credentials that are not transfered, this link will be preserved as a Linked (cross vault) state. Note that this is only supported for the "Main credentials" (at the top of an entry's properties), and no other credentials are currently preserved in such a way for now. (If the credentials are transfered along with the entries using them, everything is preserved as before)

You can expect this to take effect with the upcomcing 2026.3 version.

Regards,

Hi Jafran

Wow, great news! Thanks a lot.

Just one more question. We have a lot of credentials mapped to a folder. And the entries in the folder are getting the credentials via recurring from the folder above. This will still work as well, when the credential is moved to another folder?

Cheers
Patrick

Hello,

I might need more information to be sure I'm catching your particular setup. If I understand correctly, your session type entries are set to "Inherited", and then one of parent folder has its credential linked to an entry.

And when moving the entries, neither the folder nor the credential are being migrated? If you are also moving the folders in question, then the fix I've implemented should work. But if the folder don't follow, then my current changes won't help you. Resolving inherited connections (credentials in this case) can take a lot more involvement and that wasn't taken into account.

Regards,

Hi Jafran

We don't move the server entries or the folder. We only move the credential which is linked to the folder to another vault. So all credentials are separated from the main vault.

The rest is exactly as you said, that the folder inherits the credential to the entries beneath it.

But the folder and entries will stay in the same folder. Only the credentials are moved.

Best regards
Patrick

Hello,

I understand, you are moving the credential entries themselves. My current changes do not take this into acccount. This might be trickier than it seems, but I will see what I can do.

Regards,

Hi Jafran

Great, thanks a lot! If you have any other questions or if I should test something, just let me know.

Best regards
Patrick