Pick the right secret mode
Vault-only is simplest, Vault + password manager adds external recovery, and password-manager-only skips Vault entirely. The docs explain why you would pick each one and include matching first-message starter statements for OpenClaw.
See the starter statements ↗