secrets management Archives

12 Best Free and Open Source Secrets Management Software

Secrets management tools let you securely store, manage, and monitor sensitive information like passwords, API keys, and certificates.

Phase manages application secrets across teams and environments with encryption, secret history, integrations, and self-hosting.

Secrets Store CSI Driver mounts credentials, keys and certificates from external providers in Kubernetes pods with optional rotation.

Conjur manages application credentials, authenticates machines, enforces access policies, and protects secrets across infrastructure.

External Secrets Operator retrieves external credentials, keeps Kubernetes Secrets in sync, and supports templating and refresh policies.

SOPS is a command-line secrets editor for YAML, JSON, ENV, INI and binary files using age, PGP and multiple cloud key-management services.

Envy is a terminal secrets manager with AES-256-GCM encryption, fuzzy search, project environments and import/export of .env files.

Chamber is a local-first Rust secrets manager with an encrypted SQLite vault, terminal interface, backup tools and a REST API.

fnox loads secrets from encrypted files and remote providers into development commands, with profiles, shell integration and CI support.

Vault centralizes secrets management with dynamic credentials, certificate issuance, access policies, audit logging and encryption.

OpenBao secures application secrets, certificates and encryption keys with access policies, dynamic credentials, audit logs and an API.

Infisical manages application secrets and environment configurations with a web dashboard, integrations, CLI and self-hosting options.

Teller unifies access to secrets from cloud vaults and local files, with command injection, secret scanning, redaction and provider sync.

git-crypt transparently encrypts selected Git files using repository filters, with GnuPG access and symmetric key sharing for teams.

git-secret encrypts selected files inside Git repositories using GnuPG keys, with commands to manage collaborators and decrypt secrets.