Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Secrets Manager review

Free#35 of 44 in Secrets Management Tools

A focused open-source option for small teams that want self-hosted secrets basics.

6.2/10Editor score
Secrets Manager6.2 Try Secrets Manager

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Secrets Manager is an open-source, self-hosted secrets management tool for small teams that need a focused way to store and retrieve application secrets. Its web interface organizes organizations, projects, environments, secret versions, access grants, and service accounts. The product supports web, Windows, macOS, Linux, API, and self-hosted use, with encrypted storage based on envelope encryption.

Its strongest feature is the combination of controlled access and deployment-oriented retrieval. Teams can grant access to users and service accounts, review filtered audit logs, and roll back secret versions when needed. The command-line client injects secrets into application processes as environment variables without writing a .env file, which suits CI/CD workflows. Docker Compose deployment and local Kubernetes manifests give self-hosted teams two documented deployment paths, while the web UI provides a central place to manage environments and revisions.

The trade-off is a narrow scope. Secrets Manager covers storage, access grants, audit logging, version control, CLI injection, and Kubernetes deployment, but it does not provide verified secret rotation or dynamic secrets. Its integration footprint is also limited compared with tools built around a broader ecosystem of external services. Teams that want an open-source MVP they can deploy themselves and manage around core secrets workflows should consider it. Teams requiring automated rotation, dynamic credentials, or wider integrations should choose an alternative with those capabilities.

Secrets Manager pros and cons

  • Where it wins
    • Envelope-encrypted storage with version history and rollback
    • CLI injection delivers secrets as environment variables without .env files
    • Docker Compose and local Kubernetes deployment support
  • Where it doesn't
    • No verified secret rotation
    • No dynamic secrets support
    • Limited integration breadth

Secrets Manager fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update