Definition
The practice of securely storing, distributing, and rotating sensitive credentials like API keys, database passwords, and encryption keys.
In Depth
Secrets managers like Doppler, HashiCorp Vault, and AWS Secrets Manager centralize credential storage with access controls, audit logging, and automatic rotation. They eliminate hardcoded secrets in code, config files, and environment variables.
Example Usage
Using Doppler to manage all production secrets for the Django and FastAPI services, injected at runtime via 'doppler run'.
Business Context
Secrets management is critical infrastructure — leaked credentials are the #1 cause of data breaches, and centralized management makes rotation and revocation instant.
Related Terms
API Key
A unique identifier used to authenticate and authorize API requests, typically passed as a header or...
Cross-Origin Resource Sharing
A browser security mechanism that controls which domains can make requests to your API, preventing u...
Cross-Site Request Forgery
An attack that tricks authenticated users into performing unintended actions on a web application th...
Cross-Site Scripting
A web security vulnerability that allows attackers to inject malicious scripts into web pages viewed...
Encryption at Rest
Protecting stored data by converting it into an unreadable format that can only be decrypted with th...
Also Known As
Tags
Quick Info
Need help implementing this in your business?
Get Started