# Creating a Credential Vault

### 1. Navigate to Credentials Tab on your BugBase Dashboard

After Logging In, Click on the **Assets Dashboard** Icon and **Choose Credentials Tab**

<figure><img src="https://1542818622-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FVsYaOURvSKmQ57SN2CBT%2Fuploads%2F7dQ29qmhaTm2ORaQpezR%2Fimage.png?alt=media&#x26;token=fb694c6f-4a04-4545-a147-240fc5539432" alt=""><figcaption></figcaption></figure>

Click on Create a Vault

### 2. Add Details for the Vault

<figure><img src="https://1542818622-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FVsYaOURvSKmQ57SN2CBT%2Fuploads%2FqF02sWhllQO6utqKtLwx%2Fimage.png?alt=media&#x26;token=ab059e77-0033-4bb6-8f7c-55509554cf4c" alt=""><figcaption></figcaption></figure>

Details Include:

1. **Vault Name** - Descriptive Name for the Credential Vault
2. **Instructions** - Any Instructions to be given to Bug Hunters on how to go about using the assigned credentials
3. **Vault Type** - There are mainly two types of **Vault Type - Static & Dynamic** more about them below.

### 3. Choosing a Suitable Vault Type

#### Static Vault

Credentials in these vaults are non-assignable and if claimed the whole credential set will be available to the Bug Hunter.

Generally a static vault would be created in-case testing credentials remain the same for a long period of time.

#### Dynamic Vault

Credentials in these vaults are assignable and only one particular credential set can be claimed by the Bug Hunter

Generally a dynamic vault would be created in-case testing credentials need to be curated for a specific privilege level for a particular user.

There are **Assignment Preferences** for a **Dynamic Vault:**

<figure><img src="https://1542818622-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FVsYaOURvSKmQ57SN2CBT%2Fuploads%2F8E0ykiYRUOpuL64MBfMz%2Fimage.png?alt=media&#x26;token=7a6ca3ae-304b-468b-a745-028c6086fcdc" alt=""><figcaption></figcaption></figure>

1. **Auto-Assign Credentials:** When a Bug Hunter requests to claim a credential set, any unassigned credential set is automatically assigned to the Bug Hunter. Incase there is no credential to claim the company would be e-mailed to add more credential sets.
2. **Request Based Assign:** When a Bug Hunter requests to claim a credential set, a notification to the company is sent in order to assign a credential set to the Bug Hunter.

{% hint style="success" %}
And That's It! :tada: Congratulations you've successfully created a **Credential Vault.**
{% endhint %}

Now Up Next is adding credential sets to a Vault