SecretStash is a zero-knowledge secrets management platform for development teams. Store, share, and manage credentials securely with client-side encryption. SecretStash also provides temporary keys that are created for CI/CD pipelines where access is required for a limited amount of time. Additional features such as granular permissions, activity logs, and other languages are planned.

In the years of being a team lead or manager, credential and environment sharing has always been an issue. We usually resort to "hey, can you send me your DotEnv file in Slack?!" But as I have gotten older and wiser, while Slack is the quick and easy way to send these things, in the fast moving world with AI, we need to continue to be vigilant to protect our credentials and that of our customers. Yes there are tools like 1Password and AWS Secret Manager and they are great at what they do, but these are not truly built for local software development. So very much like Taylor Otwell developed Laravel and the various products his team has released, I created SecretStash to solve a problem that I and my teams have struggled with. I have crafted SecretStash to be a simple, low-fluff, platform that allows developers and automated systems to share credentials in a quick and secure manner. I hope you enjoy it!

SecretStash just got two major upgrades

You can now clone or copy environments directly in the interface, making it much faster to set up new environments by reusing an existing configuration.

The official SecretStash NPM package is now available at ⁠@secret-stash/cli, giving non-Laravel and non-PHP users a way to sync and share credentials with teammates and across environments. The package is a Node.js/TypeScript CLI for the SecretStash API and supports both project and global installation.

SecretStash just got two major upgrades

You can now clone or copy environments directly in the interface, making it much faster to set up new environments by reusing an existing configuration.

The official SecretStash NPM package is now available at ⁠@secret-stash/cli, giving non-Laravel and non-PHP users a way to sync and share credentials with teammates and across environments. The package is a Node.js/TypeScript CLI for the SecretStash API and supports both project and global installation.

SecretStash

Secure credential management for Laravel developers

Secure credential management for Laravel developers