Self-Hosted Secret Management: 28 Open-Source Apps
Comparisons in this tag:Bitwarden vs Vaultwarden
Best for your setup
Homelab Novice
Wants it running tonight, with one command.
Bitwarden20.6k
Bitwarden Server provides the backend APIs, database, and core infrastructure for Bitwarden client applications.
- Ships a Compose file
- Live demo
See all78/100 fitHow well this app matches homelab novices, 0 to 100
Homelab Expert
Runs a stack already and wants it to plug in.
Infisical Community Edition30.5k
Infisical is an open-source secret management platform for syncing secrets and configs across teams and infrastructure, with support for PKI, KMS, SSH certificates, and secret leak prevention.
- SSO sign-in
- REST or GraphQL API
See all91/100 fitHow well this app matches homelab experts, 0 to 100
Homelab Hacker
Wants control: APIs, scripts and many ways to run it.
Vaultwarden70.7k
A self-hosted alternative server implementation of the Bitwarden Client API, compatible with official Bitwarden clients.
- Scriptable API
- Many ways to install
See all90/100 fitHow well this app matches homelab hackers, 0 to 100
28 projects
Vaultwarden
70.7k
A self-hosted alternative server implementation of the Bitwarden Client API, compatible with official Bitwarden clients.
Password ManagersCopyleft LicenseSecret Management+1
Single Container
Bitwarden
20.6k
Bitwarden Server provides the backend APIs, database, and core infrastructure for Bitwarden client applications.
Password ManagersCopyleft LicenseFOSS with Issues+4
3 ContainersFOSS with Issues
Infisical
30.5k
Infisical is an open-source secret management platform for centralizing application secrets, configs, and internal PKI.
Secret ManagementPermissive LicenseSelf Hosting Solutions+3
FOSS with Issues
Infisical Community Edition
30.5k
Infisical is an open-source secret management platform for syncing secrets and configs across teams and infrastructure, with support for PKI, KMS, SSH certificates, and secret leak prevention.
Miscellaneous ToolsSecret ManagementSelf Hosting Solutions+4
FOSS with Issues
E2B
1.8k
An open-source runtime that powers E2B Cloud, providing isolated Firecracker microVM sandboxes that can be paused, resumed, and forked for running untrusted agent code.
AI AgentsAI ToolingOpen Core+1
21 ContainersOpen Core
OpenSandbox
17.3k
OpenSandbox is a platform for running AI agents in isolated sandboxes on local machines or Kubernetes clusters.
AI AgentsAI ToolingSecret Management+2
2 Containers
Teampass
1.9k
TeamPass is an on-premise collaborative password manager.
Password ManagersSecret ManagementSelf Hosting Solutions+2
One Time Secret
3.0k
A self-hostable service for creating one-time links that reveal sensitive information only once.
Custom CommunicationsSecret ManagementSelf Hosting Solutions+1
omnara
3.4k
Omnara is an open-source managed agent platform for running AI agents on any model and any machine, with built-in tools, secrets, permissions, and streaming.
AI AgentsAI ToolingPlatform as a Service+3
10 ContainersFully FOSS
Teleport
21.1k
Teleport is an identity-aware access platform for securing and auditing access to infrastructure, applications, databases, Kubernetes, and cloud services.
Miscellaneous ToolsRemote AccessAuthentication Services+3
Open Core
Canine
3.0k
Canine is a self-hosted Kubernetes deployment platform that simplifies PaaS-style application deployment and management on your own Kubernetes infrastructure.
Platform as a ServiceSelf Hosting SolutionsAutomation Tools+2
onecli
3.6k
OneCLI is an open-source gateway that sits between AI agents and external services to inject and manage API credentials securely.
AI AgentsSecret ManagementModel Context Protocol+1
2 Containers
agent-vault
2.5k
An open-source HTTP credential proxy and vault that brokers API credentials for AI agents without exposing the secrets directly to the agents.
Secret ManagementProxy ServersSelf Hosting Solutions+2
2 Containers
centaur
1.4k
Centaur is a self-hosted platform for teams to run shared AI agents in Slack or through an API, with isolated sandboxes and durable workflows.
Artificial IntelligenceAI AgentsAutomation Tools+2
Passbolt
6.2k
An open source password manager for teams that helps organizations securely centralize, organize, share, and audit passwords and secrets.
Password ManagersCopyleft LicenseSecret Management+1
Open Core
Yaak
19.5k
Yaak is a desktop API client for testing and working with REST, GraphQL, SSE, WebSocket, and gRPC APIs.
API ManagementTesting ToolsNetwork Utilities+2
Open Core
OTS
814
A one-time-secret sharing platform that encrypts secrets in the browser before sending them to a server and deletes them after first read.
Custom CommunicationsPastebinsSecret Management+2
Yopass
3.2k
Yopass is a self-hosted secret-sharing service for sending passwords, files, and other sensitive information with end-to-end encryption.
PastebinsSimple File UploadsPermissive License+2
2 ContainersOpen Core
Flipt
4.9k
Flipt v2 is a Git-native feature management platform for storing, versioning, and deploying feature flags alongside code.
Feature TogglesCopyleft LicenseAutomation Tools+2
Open CoreTelemetry: Opt-Out
Sup3rS3cretMes5age
572
A self-destructing secret message service that stores messages in HashiCorp Vault and deletes them after a single read.
PastebinsSecret ManagementSelf Hosting Solutions+1
Password Pusher
3.2k
Password Pusher is a web app for securely sharing passwords, notes, files, and URLs through one-time, self-deleting links.
PastebinsSecret ManagementPassword Managers+2
Open Core
Shhh
420
A tiny Flask app for creating encrypted secrets and sharing them securely via temporary links.
Custom CommunicationsPermissive LicenseSecret Management+1
flowctl
347
An open-source self-service workflow execution platform for running and managing complex workflows.
Automation ToolsTask RunnersSelf Hosting Solutions+2
4 Containers
Databunker
1.5k
Databunker is a self-hosted Go tool for secure personal records tokenization and storage, with an API and admin UI for handling sensitive PII/PHI/KYC data.
Database ManagementSecret ManagementConsent Management+2
Single ContainerOpen Core
materia
222
Materia is a GitOps tool for managing services and applications deployed as Podman Quadlets.
Automation ToolsSelf Hosting SolutionsSecret Management
ZeroClaw
24
A small Rust-based AI assistant infrastructure and autonomous runtime with pluggable providers, channels, memory, tools, and security policies.
Claws & ClankersAI AgentsAI Tooling+2
Hemmelig
1.2k
An encrypted secret-sharing platform for securely sharing sensitive information with client-side encryption and self-destructing links.
PastebinsPermissive LicenseSecret Management+1
Single Container