Universal Vault Export & Migration Container (.sve / .zip / .csv)

Docs / StarVault guide / Universal Vault Export & Migration Container (.sve / .zip / .csv)

Zero-Knowledge Encrypted Package (.sve / .starvault):
- Secure, self-contained portable vault container designed for zero-knowledge backup and seamless cross-machine migration.
- Header with STV1 magic identifier, 16-byte Argon2id salt (t=3, m=64MB, p=4), 12-byte AES-256-GCM nonce, 16-byte authentication tag, and zlib-compressed encrypted payload.
- Complete zero-knowledge payload captures all credentials, custom fields, tags, groups, physical & encrypted keyring files, attached file BLOBs, and rotation version snapshots.
- Easily imported by any other StarVault instance with passphrase protection.
Universal Import Engine & Interactive Wizard:
- Dedicated VaultImportDialog with pre-import inspection preview (counts of entries, keys, files, and version snapshots).
- Three collision resolution strategies:
  - Skip Conflicting Records: Preserves existing entries, importing only new records.
  - Overwrite Existing Records: Updates matching records with incoming data.
  - Create New Renamed Copies: Clones conflicting items with a timestamped suffix (- Imported <Timestamp>).
- Supports .sve, .starvault, structured .zip archives, and plaintext .csv.
Structured Archive Export (.zip):
- Exports credentials CSV, decrypted files, private/public keys, certificates, and an audit manifest.json.
Sanitized CSV Spreadsheet Export:
- Neutralizes spreadsheet formula injection (DDE attacks) by escaping formula triggers (=, +, -, @).
Quick Access: Available directly from the top navigation bar (📤 Export, 📥 Import) and the Settings Dialog storage card.

Updated 2026-10-31