HashiCorp Vault

Founded by Mitchell Hashimoto in 2015

Store, access, and control secrets and encryption keys securely

Cost

Free Tier

Rating

★ People love it

Time to value

Moderate Setup (1-3 hours)

You can use HashiCorp Vault to centrally manage secrets like API keys, passwords, and certificates across your infrastructure. It lets you store sensitive data, control who can access it, and audit all access attempts. Vault supports dynamic secret generation, meaning it can create short-lived credentials on demand for databases or cloud providers. It also handles encryption as a service, so apps can encrypt data without managing their own keys. Teams use it to secure secrets in Kubernetes, CI/CD pipelines, and multi-cloud environments.

What HashiCorp Vault does

Create and store secrets with versioning and access policiesGenerate dynamic database credentials that expire automaticallyRotate API keys and passwords on a defined scheduleIssue TLS certificates for internal servicesDefine access control policies per team or applicationAuthenticate services using cloud IAM roles or Kubernetes service accountsReview audit logs for all secret access eventsEncrypt and decrypt application data via API callsGenerates short-lived, on-demand database and cloud credentials automaticallyEncrypts and decrypts data for applications without exposing keysIssues and rotates TLS/SSL certificates via built-in PKI engineSupports multiple auth methods including Kubernetes, AWS IAM, LDAP, and GitHubProvides detailed audit logs of every secret access and changeAllows fine-grained access policies based on identity and roleSupports multi-cloud secret synchronization across AWS, Azure, and GCPNamespaces allow multi-team isolation within a single Vault cluster