Tools and libraries for securely storing, managing, and injecting sensitive credentials into distributed software applications.
Vault is a centralized secrets management platform designed to secure, store, and control access to sensitive credentials such as API keys, passwords, certificates, and encryption keys. At its core, the system employs a barrier-based cryptographic sealing mechanism that requires an unseal process to decrypt internal storage, ensuring that sensitive data remains protected. It provides identity-based access control to manage granular permissions across distributed infrastructure, effectively centralizing security policies and authentication for both human and machine workloads. What distinguish
HashiCorp Vault is the definitive open-source secrets management platform, providing encryption at rest, role-based access control, audit logging, dynamic secrets, rotation, and a full API and CLI for self-hosted deployment — exactly the integrated, infrastructure-grade vault you are looking for.
Infisical is a centralized secrets management platform designed to store, synchronize, and control access to sensitive credentials and configuration data across distributed development, staging, and production environments. It employs client-side encryption to ensure that secrets remain unreadable to the underlying storage infrastructure, while providing a hierarchical permission model to govern both user and machine access. The platform distinguishes itself through dynamic credential provisioning, which generates short-lived access tokens that are automatically revoked after use. It supports
Infisical is a centralized secrets management platform with client-side encryption, hierarchical permissions, dynamic credential provisioning, CLI and client libraries, and self-hostable deployment — squarely matching the need for storing, accessing, and managing secrets across apps and infrastructure, while covering almost all of the required features.
Vaultwarden is a self-hosted password management server designed to store and synchronize sensitive credentials, identities, and organizational data across multiple client devices. It functions as a database-backed web application that provides an API layer for secure client-server communication, enabling users to manage personal vaults and organizational data sharing with multi-factor authentication. The project distinguishes itself through a comprehensive administrative infrastructure that provides centralized control over server configuration, user accounts, and system diagnostics via a de
Vaultwarden is a self-hosted password management server that stores and synchronizes credentials across devices via an API, making it a genuine secrets vault—but it focuses on user passwords rather than infrastructure-level dynamic secrets or rotation, so it covers only part of what this search requests.