Hi,
See this post Why does the leaf defined with "tailf:suppress-echo true" still be printed in cli?
See the confd_types(3) man page under “The iana-crypt-hash YANG module” if you want to store it with a hash function.
See ConfD UG chapter “Storing encrypted values in ConfD” if you wish to encrypt it (and later decrypt it)