CYBERSECURITY

Secrets Management

The practice and tooling for securely storing, rotating, and controlling access to credentials like API keys, passwords, and certificates, instead of hard-coding them.

IN PRACTICE

Instead of leaving a database password in a config file, developers pull it at runtime from a secrets manager like HashiCorp Vault, which rotates it automatically.

← Back to glossary