Passwords, secrets, and the vault

N78-APA uses one master password to protect encrypted secrets on your PC. The master password is never stored — you enter it when you save or copy a secret.

Microsoft sign-in password (Store Account page)

Required enrollment prep: the password for the Microsoft account you will use in Partner Center. Saved on the Store Account page — not listed in the Credentials vault. Copy-only after save.

Workspace file: Documents\N78-APA\store-accounts\microsoft-account-signin.enc.json

Credential vault (Credentials page)

Optional secrets you add — for example a git personal access token or API key. Saved per project at {project folder}\.apa\vault\credentials.enc.json.

Recovery key

When you first save a sign-in password or create a vault, N78-APA shows a one-time recovery key. Save it outside the app. Without it, a forgotten master password cannot be recovered.

What stays unencrypted

Enrollment answers (name, address, support email, tax profile fields) stay in plain workspace or project JSON files — only passwords and other secrets use encryption.

See also Credential vault and Clipboard security for secrets.