61 best open source secret projects.

We have collection of more than 1 Million open source products ranging from Enterprise product to small libraries in all platforms. We aggregate information from all open source repositories. Search and find the best for your needs. Check out projects section.

Displaying 1 to 20 from 61 results

Keywhiz - A system for distributing and managing secrets

Java

Keywhiz is a system for managing and distributing secrets. Keywhiz servers in a cluster centrally store secrets encrypted in a database. Clients use mutually authenticated TLS (mTLS) to retrieve secrets they have access to. Authenticated users administer Keywhiz via CLI or web app UI. To enable workflows, Keywhiz has automation APIs over mTLS and support for simple secret generation plugins.

secret-store password-management certificate-management tokens certificate secret

Vault - A tool for managing secrets

Vault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Vault handles leasing, key revocation, key rolling, and auditing. Vault presents a unified API to access multiple backends: HSMs, AWS IAM, SQL databases, raw key/value, and more.

secret-store password-management certificate-management tokens certificate secret

KeePass - Password Manager

KeePass is a free, open source, light-weight and easy-to-use password manager for Windows, Linux, Mac OS X and mobile devices. You can store your passwords in a highly-encrypted database, which is locked with one master password or key file.

password password-manager secret

truffleHog - Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Python

Searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed. truffleHog previously functioned by running entropy checks on git diffs. This functionality still exists, but high signal regex checks have been added, and the ability to surpress entropy checking has also been added.

entropy secret entropy-checks regex trufflehog

KeePassX - Cross Platform Password Manager

KeePassX is an application for people with extremely high demands on secure personal data management. KeePassX saves many different information e.g. user names, passwords, urls, attachments and comments in one single database. For a better management user-defined titles and icons can be specified for each single entry. Furthermore the entries are sorted in groups, which are customizable as well. The integrated search function allows to search in a single group or the complete database. KeePassX offers a little utility for secure password generation. The password generator is very customizable, fast and easy to use. Especially someone who generates passwords frequently will appreciate this feature.

password password-manager secret

envchain - Environment variables meet macOS Keychain and gnome-keyring <3

Secrets for common computing environments, such as AWS_SECRET_ACCESS_KEY, are set with environment variables. A common practice is to set them in shell's intialization files such as .bashrc and .zshrc.

security keychain gnome-keyring secret credentials

Confidant - Your Secret Keeper. Stores secrets in DynamoDB, encrypted at rest.

Python

Confidant is a open source secret management service that provides user-friendly storage and access to secrets in a secure way, from the developers at Lyft. Confidant stores secrets in an append-only way in DynamoDB, generating a unique KMS data key for every revision of every secret, using Fernet symmetric authenticated cryptography.

secret-store password-management certificate-management tokens certificate secret aws kms

node-scrypt - Scrypt for Node

Scrypt for Node/IO is a native node/io C++ wrapper for Colin Percival's scrypt cryptographic hash utility. As should be the case with any security tool, this library should be scrutinized by anyone using it. If you find or suspect an issue with the code- please bring it to my attention and I'll spend some time trying to make sure that this tool is as secure as possible.

scrypt password auth authentication encryption crypto secret key secret-key hash verify

hvac - :lock: Python 2/3 client for HashiCorp Vault

Python

Tested against Vault v0.1.2 and HEAD. Requires v0.1.2 or later.if you would like to be able to return parsed HCL data as a Python dict for methods that support it.

vault-library vault-client vault secret security

VaultSharp - A .NET Library for HashiCorp's Vault (Secret Management System)

CSharp

A cross-platform .NET Library for HashiCorp's Vault - A Secret Management System.

dotnet-standard hashicorp-vault secret restclient vault-library vault-client vault security

Shamir Secret Sharing in Java

Java

Java implementation of Shamir's Secret Sharing algorithm as described in Applied Cryptography [as LaGrange Interpolating Polynomial Scheme].

secret-sharing secret cryptography shamir-secret-sharing security

vault-client - A command-line interface to HashiCorp's Vault

vc is a command-line interface to HashiCorp's Vault inspired by pass.To build vault-client you need a Go compiler and Git.

hashicorp-vault vault-client credentials security cli secrets vault-library vault secret

vaulted - nodejs based wrapper for HashiCorp's Vault HTTP API

Javascript

A nodejs wrapper library for using HashiCorp's Vault

vault hashicorp secret-management nodejs token auth secrets vault-library vault-client secret security

vault-ruby - The official Ruby client for HashiCorp's Vault

Ruby

Vault is the official Ruby client for interacting with Vault by HashiCorp.The documentation in this README corresponds to the master branch of the Vault Ruby client. It may contain unreleased features or different APIs than the most recently released version. Please see the Git tag that corresponds to your version of the Vault Ruby client for the proper documentation.

vault-library vault-client vault secret security

scala-vault - Hashicorp Vault Scala Libraries

Scala

Scala library for working with Hashicorp Vault.This library uses the Dispatch, a lightweight async HTTP client to communicate with Vault.

vault hashicorp-vault scala-library vault-library vault-client secret security

ansible-vault - ansible lookup plugin for secrets stored in Vault(by HashiCorp)

Python

lookup plugins can be loaded from several different locations similar to $PATH, see lookup_plugins. An example setup can be found in the tests directory.The source for the plugin can be pointed to via a requirements.yml file, and accessed via ansible-galaxy.

vault ansible ansible-variables lookup-plugin secrets-stored vault-library vault-client secret security

vault-php-sdk - Vault PHP SDK, inspired by sensio consul sdk

Vault PHP SDK, inspired by sensio consul sdk

vault-library vault-client vault secret security

node-vault - Client for HashiCorp's Vault

Javascript

Javascript client for HashiCorp's Vault

vault hashicorp nodejs secrets client api-client api node node-vault manage vault-library vault-client secret security

vault-java-driver - Zero-dependency Java client for HashiCorp's Vault

Java

A zero-dependency Java client for the Vault secrets management solution from HashiCorp.This driver strives to implement Vault's full HTTP API, along with supporting functionality such as automatic retry handling. It does so without relying on any other external libraries beyond the Java standard library, and is compatible with Java 7 and up. So it will play nice with all of your projects, greenfield and legacy alike, without causing conflicts with any other dependency.

vault-library vault-client vault secret security