OpenBao is an identity-based secrets and encryption management system. It provides centralised storage and controlled access to sensitive information, including API keys, passwords, certificates and database credentials.
Applications and administrators can access secrets through a web interface, command-line tools or an HTTP API. OpenBao authenticates clients and applies access policies before granting access to protected resources. It also maintains audit records that help organisations monitor how secrets are used.
Beyond storing static credentials, OpenBao can generate temporary credentials for supported services, manage their lifetimes and revoke access when they expire. Its transit secrets engine provides encryption and decryption operations without requiring applications to handle encryption keys directly.
The project is a community-driven fork of HashiCorp Vault, governed through the Linux Foundation’s Open Source Security Foundation.
This is free and open source software.
Key Features
- Secure storage for passwords, API keys, certificates and other sensitive data.
- Generate dynamic credentials for supported databases and cloud services.
- Apply authentication methods and identity-based access policies.
- Encrypt and decrypt application data through the transit secrets engine.
- Manage certificate issuance through a PKI secrets engine.
- Support credential leasing, renewal and revocation.
- Record secret access and administrative operations through audit devices.
- Offer a web interface, command-line tools and HTTP API.
- Support external HSM and KMS-backed keys through compatible integrations.
Website: github.com/openbao/openbao
Support:
Developer: Linux Foundation / OpenBao community
License: Mozilla Public License 2.0
OpenBao is written in Go and JavaScript. Learn Go with our recommended free books and free tutorials. Learn JavaScript with our recommended free books and free tutorials.
Related Software
| Secrets Management | |
|---|---|
| OpenBao | Manage, store, and distribute sensitive data |
| SOPS | Editor of encrypted files |
| Sealed Secrets | One-way encrypted secrets |
| Teller | Manages secrets across multiple vaults and cloud services |
| External Secrets Operator | Synchronizes secrets from external providers with Kubernetes |
| Infisical | Secrets management, PKI, and SSH access |
| Secrets Store CSI Driver | Mounts external secrets into Kubernetes pods |
| fnox | Encrypted/remote secret manager |
| Envy | Slick TUI for browsing secrets and a CLI for automation |
| Conjur | Secures application secrets and authenticates machine identities |
| Phase | Collaborative secrets management for teams |
| Chamber | Modern secret management solution |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.