Free and open first
Best Secrets Management Tools in 2026
Secrets management tools help teams handle sensitive values such as credentials across development and deployment work. Compared on deployment model, audit logs, secret rotation, and CI/CD injection, these entries show several aspects of managing access and change. Keyway, Kubermatic Kubernetes Platform, and Phase are among the options to examine. Kubernetes integration and dynamic secrets may matter for your environment; free-plan availability and free secret limits add useful access context. Compare paid-from pricing with the controls and integrations you need, and consider how each listed capability fits your team's approach to handling secrets.
- 46 apps
- Research read 23 Sept 2026
- How the order is worked out
- 1
Chamber
Free plan APILinuxMac+2Chamber provides local vault storage, terminal tools, and an API without a listed cost. Take care with exported backups, which contain plaintext.
- 2
Doppler
Free plan APIExtensionLinux+4Doppler combines secret management with developer tooling, integrations, and access controls, and offers cloud and on-prem deployment.
- 3
dotenvx
Free plan LinuxMacSelf-hosted+1dotenvx combines encrypted .env files with runtime decryption and a broad set of development and deployment integrations.
- 4
Envshed
Free plan APILinuxMac+2Choose Envshed if your small engineering team wants cloud secret and environment management with a CLI that works across monorepo workspaces.
- 5
AWS Secrets Manager
Free plan APIWebChoose AWS Secrets Manager if you need lifecycle management for application credentials and want rotation, regional replication, and AWS monitoring integrations.
- 6
Infisical
Free plan APILinuxSelf-hosted+2Infisical combines secrets, certificate, and privileged-access management with both cloud and self-hosted deployment. Review the free certificate limits and annual billing terms when choosing a plan.
- 7
KeyEnv
Free plan APILinuxMac+2KeyEnv brings secret management, environment separation, scanning, and database rotation into one workflow.
- 8
Keyway
Free plan APILinuxMac+3Keyway focuses on process-level secret injection, repository-based access, and an auditable access trail.
- 9
OpenBao
Free plan APILinuxMac+3OpenBao provides self-managed secret storage, dynamic credentials, and encryption controls with multiple deployment options.
- 10
Keyshade
Free plan APISelf-hostedWebKeyshade combines secret management with scanning, access controls, version history, and runtime updates.
- 11
Phase
Free plan APILinuxMac+3Phase combines secret management with deployment options, access controls, and offline CLI support.
- 12
OpenStack Barbican
Free plan APILinuxSelf-hostedBarbican offers OpenStack-native secret management with configurable storage integrations, including HSM support.
- 13
PX Secrets
Free plan APILinuxMac+3PX Secrets provides a local encrypted vault with web, CLI, and API access for self-hosted use. The default API and key recovery limits matter when deciding how to deploy and safeguard it.
- 14
R4
Free plan AndroidAPIExtension+5R4 combines secret storage, license operations, agent workflows, and audit controls in one cloud platform.
- 15
secr
Free plan APIExtensionLinux+3secr combines application secrets workflows with controls for non-human identities and AI agents. Compare the free plan’s limits and audit retention with the paid tiers’ stated allowances.
- 16
Secrets Manager
Free plan APILinuxMac+3Secrets Manager combines encrypted storage, access grants, audit events, and CLI-based secret injection in a self-hosted package.
- 17
SikkerKey
Free plan APILinuxMac+2SikkerKey combines a broad set of secret types with machine authentication and integrations for software infrastructure.
- 18
Stashbase
Free plan APILinuxMac+1Stashbase combines secret management with policies and sandbox controls for developer and coding-agent access.
- 19
Oracle Cloud Infrastructure Secret Management
by Oracle Cloud Infrastructure Secret ManagementFree plan APIWebOCI Secret Management centralizes credential storage, access control, rotation, and replication.
- 20
Shelve
Free plan APISelf-hostedWebShelve offers free, open-source secret management with scoped access, CLI injection, and GitHub synchronization.
- 21
Teller
Free plan LinuxMacWindowsTeller combines provider connections with secret scanning, environment injection, and redaction features. Note that writing values is limited to providers that support write use cases.
- 22
VMware Secrets Manager
Free plan APILinuxSelf-hostedChoose VSecM if you need a self-hosted Kubernetes secrets store with multiple delivery options, secret versioning, and runtime rotation.
- 23
Akeyless
Free plan LinuxWebAkeyless offers a no-cost plan with stated limits and a separate Enterprise option with custom limits.
- 24
Vibr8Vault
Free plan APILinuxMac+3Vibr8Vault offers a broad self-hosted interface and security feature set for secret management. Its beta status and macOS signing caveat deserve attention before deployment.
- 25
HashiCorp Vault
Free plan LinuxMacWindows
#1Places #1, #2, #3, #4, #5 on this list can be bought by the makers of the software on it. See the price
More in Developer Tools
- Secrets Scanning Software24
- Service Mesh Platforms22
- Service Virtualization Software21
- Software Composition Analysis Software65
- Software Packaging Tools29
- Software Supply Chain Security Software24
- Spatial Databases40
- SQL Linters and Formatters26
- SSH Clients33
- Static Analysis Tools38
- Static Application Security Testing Software25
- Static site generators35