Decrypting Secrets Returned by Zoho Vault API

Decrypting Secrets Returned by Zoho Vault API

Hello,

I've been able to follow the documentation here: Zoho Vault | API Reference and successfully call the GET_LOGIN operation with my token. I get back a response containing/similar to this:

"name": "GET_LOGIN",
        "details": {
            "PASSPHRASE": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxABCDEFG==",
            "SALT": "xxxxxxxxxxxxxxxxxxxxxxxxxx5423",
            "ITERATION": 123456,
... etc.

There is a bit of documentation on using a passphrase, with javascript code:

var masterKey = null;
 var passphrase = "user_passphrase"; if(LOGINTYPE == "PBKDF2_AES"){
 var masterKey = Vault.PBKDF2_key(passphrase, SALT, ITERATION); }else{
 var masterKey = Vault.hash(passphrase);
 var passAuth = Vault.hash(passphrase+SALT); }

But, there is then no documentation or example on actually using this masterKey to decrypt a secret. From what I can gather online with PBKDF2 and AES, I need to use the masterKey to actually decrypt. But with AES, you also seem to need an initialization vector, or nonce (number used only once), and that is not mentioned at all. 

My question is, what would an example decryption look like with the master key?

    • Sticky Posts

    • Introducing SecureForms in Zoho Vault

      Hey everyone, Let’s face it—asking someone to send over a password or other sensitive data is rarely straightforward. You wait. You nudge. You follow up once, twice—maybe more. And when the information finally arrives, it shows up in the worst possible

    • Join our World Password and Passkey Day expert Q&A 2025

      Hey everyone! World Password and Passkey Day is almost here, and there's no better time to talk about something we all rely on daily—secure authentication. Did you know that a staggering 60% of hacking-related breaches are tied to weak or stolen passwords?

    • Zoho Vault: A look at what's new for iOS, iPadOS, and macOS

      Hi everyone, At Zoho Vault, we constantly aim to improve your security experience. Based on both internal and external feedback, we have recently rolled out updates across our iOS, iPadOS, and support for macOS platforms. Introducing the desktop app for

    • iOS 12 update: Introducing autofill passwords and Siri Shortcuts in Zoho Vault

      With this iOS 12 release, Zoho Vault users can now autofill usernames and passwords on Safari and other third-party apps. Users can enjoy a seamless login experience to their everyday apps without compromising security and also access passwords stored in Zoho vault with Siri Shortcuts by adding personalized phrases. How to enable autofill password on your iOS device? First, you need to update your device to iOS 12.  Apple recommends you to take a backup before you update your device to the latest