The vault is SyncNow's cloud safe for your real FTP credentials: they go in, they do their job, and they never come back out.
When SyncNow needs to touch your site, whether to observe it or to run an assistant's operation, it does not pass the password around. Instead your real FTP credentials are stored in the cloud vault, the cloud executor reads them server-side to do the actual FTP work, and the result comes back while the credential itself stays put.
Why a vault instead of local storage?
Keeping the authoritative secret in one controlled place means it is not scattered across PCs, chat windows or scripts. An AI assistant connecting to your project gets a one-time proxy password for a local endpoint, never the vaulted FTP login. Direct FTP by an assistant is forbidden, and SyncNow detects and bans bypass attempts.
On your own PC a DPAPI-encrypted copy lets the app reconnect, but the vault stays the source of truth.