Secrets Manager

What Secrets Manager is

Secrets Manager is a free, open-source system for storing application secrets on infrastructure you host yourself. Its web interface organizes secrets into organizations, projects, and environments, and supports importing .env files, editing or revealing values, keeping versions, rolling back, and soft-deleting secrets. The `secrets run` command supplies an environment’s secrets to a child process and its descendants without writing a .env file. Documented workflows cover Node.js, Python, npm, and Next.js; CI or deployment can use an API URL, token, and environment ID. Users and service accounts can receive access at project or environment scope, and revealing a value requires a specific grant. The backend uses AES-256-GCM envelope encryption, and the documentation says plaintext secret values are not stored in the database. Audit events include secret reveals, and a secret is not returned if the required audit write fails. Startup requires a user-generated master key; losing it makes stored secrets unrecoverable. The maker also warns that a real key appeared in repository history before 2026-07-26 and says affected secrets should be treated as disclosed. Docker Compose is required, as is Node 20 or later for the CLI step.