...
The encrypted Vault in the Vault Password Manager app is designed to prevent the ability to decrypt a Vault without a user’s Application Password.
Local-Only Encryption Model
...
PBKDF2(SHA-256, RecoveryKey, UserId+RecoveryKey, 27,000, 256)
A vault Vault encryption key is calculated with:
...