fnox is a secrets manager that helps developers work with encrypted configuration values and credentials stored in remote services. It provides a consistent interface for accessing secrets during local development, automated builds and production deployments.
The software supports several storage approaches. Secrets can be encrypted in project configuration files using age, hardware-backed keys or cloud key-management services. Alternatively, fnox can retrieve credentials from providers such as AWS Secrets Manager, Azure Key Vault, Google Secret Manager, 1Password, Bitwarden and Infisical.
A project configuration file defines where secrets are stored and how they should be accessed. fnox can then retrieve the appropriate values and inject them into a command’s environment. Profiles allow different credentials and configurations to be selected for development, testing and production without changing application code.
Additional features include shell integration, encrypted local caching, temporary credentials and an optional daemon for reusing resolved values.
This is free and open source software.
Key Features
- Manage secrets stored in encrypted files and remote services.
- Support age, FIDO2, YubiKey and cloud KMS encryption providers.
- Integrate with major cloud secrets managers and password managers.
- Inject secrets into applications and scripts using fnox exec.
- Use configuration profiles for different projects and environments.
- Load and unload secrets automatically through shell integration.
- Cache remote secrets locally in encrypted form for offline use.
- Support temporary credentials through compatible lease providers.
- Provide an optional daemon for caching resolved secrets in memory.
- Integrate with development tools, CI pipelines and automated workflows.
Website: github.com/jdx/fnox
Support:
Developer: jdx
License: MIT License
fnox is written in Rust. Learn Rust with our recommended free books and free tutorials.
Related Software
| Secrets Management | |
|---|---|
| OpenBao | Manage, store, and distribute sensitive data |
| SOPS | Editor of encrypted files |
| Sealed Secrets | One-way encrypted secrets |
| Vault | Tool for securely accessing secrets |
| Infisical | Secrets management, PKI, and SSH access |
| fnox | Encrypted/remote secret manager |
| Envy | Slick TUI for browsing secrets and a CLI for automation |
| Chamber | Modern secret management solution |
Read our verdict in the software roundup.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.