Adding and Managing Data in Zero
Working with Your Data in Zero
Now that you’ve created your first database in Zero, it’s time to start adding and managing the data inside it. Whether you’re storing passwords, notes, or records, Zero keeps the flow simple and secure.
Adding new entries (rows)
- Open the database inside your active vault.
- Click Add Row.
- Fill the fields (e.g., username, email, password).
- Click Save.
If a field is marked encrypted, Zero stores it encrypted at rest using a per-row salt. The value is only decrypted when you choose to view it while you’re logged in.
Editing existing data
Click Edit on a row to update its fields, then save. Encrypted fields stay protected; Zero decrypts them only when needed while your session is unlocked.
Deleting rows
Use the Delete action on a row to remove it from normal views. Zero records a deleted_at timestamp (soft delete), so deleted rows are hidden from listings, search, and exports by default.
About soft delete
Rows you delete are not immediately erased from the vault file; they’re flagged with deleted_at and excluded from regular operations. Permanent removal happens when you purge/compact or restore from a backup without those rows.
Viewing encrypted data
Fields marked as encrypted appear masked by default. To reveal a value, use the decrypt or copy action for that field while you’re logged in. If your session has expired, you’ll be asked to log in again first.
What’s decrypted?
- Scalar fields (e.g., passwords, notes) are decrypted on demand.
- File fields are decrypted only when you open or download them.
- Decryption happens in your session; Zero never sends your secret anywhere.
Uploading files
If your database includes file fields, you can attach PDFs, images, or text files.
- Files can be stored on disk under
/media(recommended for larger files) or inside the database (good for small files). - Encrypted file fields are kept encrypted at rest and decrypted only when accessed.
- Text-like content (e.g., recovery codes) can be previewed in the app when decrypted.
Searching & filtering
Use the search bar and column filters to quickly narrow results. Filters apply to regular (non-file) fields and honor soft deletes (deleted rows are excluded).
Bulk import & export
- Export your current view (or all rows) to CSV/XLSX. Encrypted scalar fields are decrypted in the export you download.
- Import CSV/XLSX with a two-step flow: validate → map columns → commit. Choice fields are validated; encrypted fields are encrypted on write.
Backups (recommended)
Use the Backups page to create one-click ZIP backups of all vaults and key configs. You can also enable automatic backups on a schedule and keep only the latest N auto backups. Restores are guided and can create a safety backup first.
Tips
- Use clear field names and consistent types for cleaner search and exports.
- Mark truly sensitive fields as encrypted (e.g., passwords, keys, private notes).
- Prefer storing big files on disk (file field) rather than inside the DB.
- Set up automatic backups so you always have a recent restore point.
Remember
- Only fields you mark as encrypted are stored encrypted at rest.
- Decryption happens only on demand in your local session.
- If you lose your master password and recovery kit, encrypted data can’t be recovered.