# Automation for accounts in local vaults

With Cerby, you can now perform automated tasks for accounts saved in vaults with local encryption.

Automation was previously exclusive to workspaces with cloud vaults, leveraging server-side tasks performed by the Cerby bot. Now, this capability extends to accounts in local vaults, combining robust security with seamless efficiency to elevate your user experience.

The following are the automated tasks supported for accounts in local vaults:

* Rotate passwords
* Turn on multi-factor authentication (MFA)

***

## Learn how automation works for accounts in local vaults

With Cerby, you can create additional local vaults to leverage a Zero-Knowledge architecture. The automated tasks supported in local vaults enhance security and ensure that exposure is limited and managed effectively, even during an attack.

The automated tasks for accounts in local vaults are executed as follows:

1. Your account is stored securely in a local vault.
2. When you trigger the automated task to rotate a password or turn on MFA, Cerby prompts you to confirm whether it's okay to temporarily use a cloud vault.
3. When you confirm this action, your local vault encryption key is *temporarily* shared with the cloud vault.
4. The Cerby bot performs the automated task using the account information from the cloud vault.
5. When the automated task is complete, the Cerby bot sends the final status (success or failure) back to the Cerby platform.
6. The Cerby platform then triggers the removal of the vault encryption key from the cloud vault, ensuring that your account's secrets are only stored locally again.

With the previous flow, Cerby guarantees the following:

* Your account information is temporarily shared with the cloud vault only for the duration of the automated task.
* Your key is not exposed to Cerby because we follow the Zero Knowledge principles at all times. Your information is encrypted, and we can’t access your encryption keys. The Cerby bot handles the entire process automatically and securely.
* After completing the automated task, the cloud vault is cleaned up, and your information remains safe in your local vault.

***

## Related articles

The following articles contain more information about automation for accounts in local vaults:

* [Manage local vault assignments for an account](https://help.cerby.com/cerby-web-app/accounts/managing-your-accounts/manage-local-vault-assignments-for-an-account)
* [Run automated tasks for accounts in local vaults](https://help.cerby.com/cerby-web-app/accounts/protecting-your-accounts/run-automated-tasks-for-accounts-in-local-vaults)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.cerby.com/tips-and-troubleshooting/best-practices/accounts/explore-automation-for-accounts-in-local-vaults.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.