diff --git a/pwgen-vault.sh b/pwgen-vault.sh
new file mode 100644
index 0000000..7c4151e
--- /dev/null
+++ b/pwgen-vault.sh
@@ -0,0 +1,2 @@
+#! /bin/sh
+pwgen 16 1 | ansible-vault encrypt_string