Vault Secrets Manager

Vault is an open-source secrets management tool created by HashiCorp, founded by Mitchell Hashimoto and Armon Dadgar, providing centralized encryption, storage, access control, and auditing for secrets including API keys, passwords, certificates, and encryption keys, solving the challenges of secrets distribution, rotation, and access management in modern distributed systems through identity-based access policies, dynamic secrets, and encryption as a service, adopted by over ten thousand organizations including Barclays, SAP, Deutsche Bank, and Snap for managing secrets in cloud-native and hybrid environments. The secrets engines provide pluggable backends for different types of secrets and credential management, including the key-value engine for static secret storage, the dynamic secrets engine that generates credentials on demand for databases including PostgreSQL, MySQL, MongoDB, and cloud platforms including AWS, Google Cloud, and Azure with automatic lease expiration and revocation, the transit engine providing encryption as a service without storing the data, the PKI engine for certificate authority and certificate management, and the identity engine for mapping external identities to internal entities. The authentication methods support multiple identity providers for client authentication to Vault, including AppRole for machine authentication with role IDs and secret IDs, Kubernetes service account tokens for Kubernetes workloads, AWS IAM for cloud workloads, LDAP and Active Directory for enterprise users, GitHub for developer teams, and JWT and OIDC tokens for federated authentication, with each auth method mapping authenticated identities to Vault policies through the identity system. The audit devices log all Vault operations. The Shamir secret sharing for seal and unseal. The replication for disaster recovery. The namespaces for multi-tenancy. Designed by HashiCorp. Designed for DevOps and security teams.