Envshed is a cloud secrets manager for small engineering teams, with a CLI designed for shared projects and monorepos.
Best Secrets Management Tools in 2026
Managing credentials across development and deployment means weighing how secrets are stored, accessed, and updated. Compared on deployment model, audit logs, secret rotation, and CI/CD injection, these tools offer different ways to handle sensitive values in a workflow. Kubernetes integration and dynamic secrets may matter for the environments you support, while free plans, free secret limits, and paid-from pricing…
Keyway is an open-source secrets manager for injecting environment variables into a running process rather than keeping them in a project .env file.
Infisical is an identity security platform for managing application secrets, certificates, and privileged access across cloud, on-premises, and AI infrastructure.
- 4

Oracle Cloud Infrastructure Secret Management
Oracle Cloud Infrastructure Secret Management stores, retrieves, rotates and manages credentials used by applications and cloud environments.
Free planWebAPI7.0Free plan - 5

secr
secr is a cloud service for managing secrets and non-human identities in development teams.
Free planWebAPIExtensionLinux7.0From $6 a month - 6

SikkerKey
SikkerKey is a secrets manager and vault for application and infrastructure credentials.
Free planWebAPILinuxmacOS7.0From $29 a month - 7
KeyEnv
KeyEnv is a secrets management platform for handling environment variables across development workflows.
Free planWebAPILinuxmacOS6.9From $40 a year - 8

Phase
Phase is an open-source platform for managing application secrets from development through production.
Free planWebAPILinuxmacOS6.9From $10 a month - 9

Doppler
Doppler is a secrets manager for storing and managing sensitive application secrets through a dashboard, API, and command-line tool.
WebAPIExtensionLinux6.7From $8 a month - 10
dotenvx
dotenvx encrypts secrets stored in .env files, then decrypts and injects them when an application runs.
Free planLinuxmacOSSelf-hostedWindows6.7From $5 a month - 11
Keyshade
Keyshade is an open-source platform for managing secrets and configuration variables through its web, API, and self-hosted deployments.
Free planWebAPISelf-hosted6.7From $7.99 a month - 12
Secrets Manager
Secrets Manager is a free, open-source system for storing application secrets on infrastructure you host yourself.
Free planWebAPILinuxmacOS6.7Free plan - 13

AWS Secrets Manager
AWS Secrets Manager is a cloud service for managing application and infrastructure secrets, including database credentials and API keys, across their lifecycle.
Free planWebAPI6.6$0.40 usage-based - 14
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 15

OpenBao
OpenBao is an open-source system for managing access to secrets and encryption, including API tokens, keys, passwords, and certificates.
Free planWebAPILinuxmacOS6.4Free plan - 16
PX Secrets
PX Secrets is a free, open-source secrets manager that keeps an encrypted vault on the user’s machine.
Free planWebAPILinuxmacOS6.4Free plan - 17
SAP Extended Enterprise Content Management by OpenText
AndroidiOSWebLinux6.4 - 18
VMware Secrets Manager
VMware Secrets Manager (VSecM) is a free, open-source secrets store for holding configuration and delivering it to workloads.
Free planAPILinuxSelf-hosted6.4Free plan - 19
Stashbase
Stashbase manages application secrets across projects and environments, with controls over how developers, services, and coding agents use credentials and other resources.
Free planWebAPILinuxmacOS6.2Free plan - 20
Chamber
Chamber is a local-first secrets manager for storing sensitive information in vault files on your system.
Free planAPILinuxmacOSSelf-hosted6.1Free plan - 21
OpenStack Barbican
OpenStack Barbican is a key management service for securely storing, provisioning, and managing secrets such as keys, certificates, passwords, and binary data.
Free planAPILinuxSelf-hosted6.1Free plan - 22
Shelve
Free planWebAPISelf-hosted6.1Free plan - 23
Teller
Teller is an open-source secret manager for developers working with secrets during development, testing, and app builds.
Free planLinuxmacOSWindows6.1Free plan - 24
Vibr8Vault
WebAPILinuxmacOS6.1 - 25
Keyorix
WebAPILinuxmacOS6.0

