# am.noz.twopassword.config

> Published by [noz.am](https://lexicon.garden/identity/did:plc:lmkzmvv6sdxntwtyxpg7fqqq)

✓ This is the authoritative definition for this NSID.

## Links

- [View on Lexicon Garden](https://lexicon.garden/lexicon/did:plc:lmkzmvv6sdxntwtyxpg7fqqq/am.noz.twopassword.config)
- [Documentation](https://lexicon.garden/lexicon/did:plc:lmkzmvv6sdxntwtyxpg7fqqq/am.noz.twopassword.config/docs)
- [Examples](https://lexicon.garden/lexicon/did:plc:lmkzmvv6sdxntwtyxpg7fqqq/am.noz.twopassword.config/examples)

## Definitions

### `am.noz.twopassword.config`

**Type**: `record`

Root configuration and encrypted Vault Key for 2password vault in an AT Protocol Space.

**Key**: `literal:self`

| Property | Type | Required | Description |
|----------|------|----------|-------------|
| `createdAt` | `string` (datetime) | Yes |  |
| `encryptedVaultKey` | `object` | Yes |  |
| `kdf` | `object` | Yes |  |
| `updatedAt` | `string` (datetime) | No |  |
| `version` | `integer` | Yes | Vault schema version |

## Raw Schema

```json
{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Root configuration and encrypted Vault Key for 2password vault in an AT Protocol Space.",
      "key": "literal:self",
      "record": {
        "properties": {
          "createdAt": {
            "format": "datetime",
            "type": "string"
          },
          "encryptedVaultKey": {
            "properties": {
              "ciphertext": {
                "description": "AES-256-GCM encrypted 256-bit Vault Key (base64)",
                "type": "string"
              },
              "iv": {
                "description": "12-byte initialization vector (base64)",
                "type": "string"
              },
              "tag": {
                "description": "16-byte AES-GCM authentication tag (base64)",
                "type": "string"
              }
            },
            "required": [
              "iv",
              "ciphertext",
              "tag"
            ],
            "type": "object"
          },
          "kdf": {
            "properties": {
              "algorithm": {
                "knownValues": [
                  "argon2id",
                  "pbkdf2"
                ],
                "type": "string"
              },
              "iterations": {
                "description": "Argon2 iterations (e.g. 3)",
                "type": "integer"
              },
              "memory": {
                "description": "Argon2 memory in KiB (e.g. 65536 = 64MB)",
                "type": "integer"
              },
              "parallelism": {
                "description": "Argon2 parallelism threads (e.g. 4)",
                "type": "integer"
              },
              "salt": {
                "description": "Optional extra salt (base64) when DID is not used alone",
                "type": "string"
              }
            },
            "required": [
              "algorithm",
              "memory",
              "iterations",
              "parallelism"
            ],
            "type": "object"
          },
          "updatedAt": {
            "format": "datetime",
            "type": "string"
          },
          "version": {
            "description": "Vault schema version",
            "type": "integer"
          }
        },
        "required": [
          "version",
          "kdf",
          "encryptedVaultKey",
          "createdAt"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "am.noz.twopassword.config",
  "lexicon": 1
}
```