HashiCorp Vault

HashiCorp Vault is an open-source secrets management platform designed to securely store, manage, and control access to sensitive information such as passwords, API keys, tokens, certificates, and encryption keys. It provides centralized secret management, dynamic credential generation, encryption services, and fine-grained access control to help secure applications, infrastructure, and cloud-native environments.

• Securely stores and manages secrets such as passwords, API keys, certificates, and tokens.
• Generates dynamic credentials for databases, cloud providers, and other supported services.
• Provides encryption as a service to protect sensitive application data.
• Supports automatic secret leasing, renewal, and rotation.
• Implements fine-grained access control using policies and identity-based authentication.

Hashicorp Vault usage:

$ sudo su
$ apt update
$ cd /opt/vault
$ docker compose restart

$ Initialize vault:
# docker exec -it vault vault operator init

Note: Save 3 Unseal keys and Initial Root Token to get started with vault.

$ Unseal Vault: Run the following command three times, each time entering a different unseal key when prompted:
# docker exec -it vault vault operator unseal

$ Log in with Vault and paste your given token:
# docker exec -it vault vault login

$ Access WebUI in your browser and sign up with your respective token:
# http://SERVER-IP:8200