Skip to content

Instantly share code, notes, and snippets.

@HariSekhon
Created June 7, 2024 11:06
Show Gist options
  • Save HariSekhon/a17a9eac08be97d70135c7195742f8c5 to your computer and use it in GitHub Desktop.
Save HariSekhon/a17a9eac08be97d70135c7195742f8c5 to your computer and use it in GitHub Desktop.
secrets-managers.md from HariSekhon/Knowledge-Base repo: https://github.com/HariSekhon/Knowledge-Base

Secret Managers

Personal password managers offer a great convenience to use different passwords everywhere to limit exposure risks when one site or another inevitably gets hacked (see https://haveibeenpwned.com/).

However, they also represent a single point of failure they themselves get hacked.

  • Google Password Manager - built-in to the Chrome browser. If Google gets hacked it's game over because everybody relies on Google for GMail and SSO auth logins.
  • BitWarden - open-core, free for personal use
  • 1Password
  • Keeper
  • LastPass - don't use this one - they've been hacked before. I'm not even going to provide a link to this.

Local Secret Managers

Cloud Secret Managers & Vaults

Secret Managers allow integrations to share secrets between different technologies.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment