Tally Vault
Tally Vault (officially TallyVault) is a security feature that encrypts an entire company's data in Tally so it cannot be read or opened without the vault password. It is set at company creation or applied to an existing company. It matters because it protects sensitive accounting data at rest — even someone with the data files cannot access the accounts without the password, and there is no way to recover a lost one.
What Is Tally Vault?
Tally Vault is Tally's encryption layer for a company's books. When enabled, the whole company database is encrypted and the company name itself is masked in the list, so the data is unreadable to anyone without the vault password. It is distinct from ordinary user logins: a normal password controls who can operate a company, while the vault password is what actually decrypts the underlying data.
An Indian business reaches for Tally Vault where the accounting data is genuinely sensitive — a Jaipur jeweller or a professional firm holding client financials on a shared machine. The trade-off is strict: TallyVault has no back door, so a forgotten vault password means the data cannot be recovered. That makes it powerful for confidentiality and unforgiving of poor password management, which is why it is paired with disciplined backups.
Key terms
- Tally XML Export — Exporting Tally data as XML for interchange or migration.
- Remote Tally Access — Accessing a Tally company securely from another location.
- Ledger Mapping Schema — The map of source ledgers to destination accounts in a migration.
How Tally Vault Works
Tally Vault wraps a company's data in encryption tied to a password:
- 1Choose to encrypt
The vault is enabled either during company creation or later on an existing company — the decision point.
- 2Set the vault password
A strong password is set; this key, not a user login, is what encrypts and decrypts the data.
- 3Company is encrypted
Tally encrypts the database and masks the company name in the selection list.
- 4Decrypt on open
Opening the company requires the vault password; without it the data is unreadable.
- 5Back up separately
Because there is no password recovery, encrypted backups are kept so a lost password does not mean lost data — though the backup is itself vault-protected.
How to Set Up Tally Vault in Tally
TallyVault can be set when creating a company or applied afterwards (TallyPrime; note the menu moved from Alt+F3 in Tally.ERP 9 to Alt+K in TallyPrime):
- 1At company creation
On the Create Company screen, in the Security section set 'Set TallyVault password to encrypt company data' to Yes and enter a strong password.
- 2For an existing company (open Company menu)
From the Gateway of Tally, press Alt+K (Company).
- 3Select TallyVault
Choose TallyVault from the Company menu, then select the company you want to encrypt.
- 4Set and confirm the password
Enter and confirm the vault password; Tally creates a new encrypted company and preserves the original.
- 5Verify the mask
Confirm the company name now shows masked in the company list, indicating encryption is active.
- 6Secure a backup
Take and safely store a backup, remembering the vault password cannot be recovered if lost.
Tally Vault: A Practical Example
| Particulars | Amount (INR) | Treatment |
|---|---|---|
| Company books value at risk | 82,00,000 | Sensitive turnover and party data |
| TallyVault enabled | — | Company data encrypted, name masked |
| Access without password | — | Data unreadable — protection working |
| Cost of a lost password | 82,00,000 data | Unrecoverable — backups essential |
A Jaipur jeweller keeps ₹82,00,000 of turnover and client data in Tally on a shared office machine. Enabling TallyVault encrypts the company and masks its name, so even a person copying the data files cannot open the books without the vault password. The same feature is unforgiving: if the password is lost there is no recovery, which is why the firm pairs the vault with a disciplined, protected backup routine.
No record of the vault password: A forgotten password makes the data permanently unrecoverable → store the password securely and redundantly.
Common Mistakes With Tally Vault
TallyVault's strength is also its risk if handled loosely:
- No record of the vault password — A forgotten password makes the data permanently unrecoverable → store the password securely and redundantly.
- Confusing vault with user login — Assuming a user password protects the data leaves it unencrypted → use TallyVault for actual encryption, user roles for access control.
- No backups — Relying on a single encrypted copy risks total loss → keep regular, protected backups.
- Weak vault password — An easy password undermines the encryption → use a strong, unique password.
Tally Vault (officially TallyVault) is a security feature that encrypts an entire company's data in Tally so it cannot be read or opened without the vault password. It is set at company creation or applied to an existing company. It matters because it protects sensitive accounting data at rest — even someone with the data files cannot access the accounts without the password, and there is no way to recover a lost one.
Need help with Tally Vault?
Tally Vault sits inside your day-to-day books. Patron's CA-led team keeps them accurate, compliant and audit-ready.
Applicable framework: Product guidance – TallyPrime (TallyVault); data-security practice; record retention under Companies Act 2013 (Section 128). For general information only, not professional advice. Verify the current position for your entity before acting.