infisical

dotenvx

dotenvx is a secure implementation of dotenv from the creator of the original library. It loads environment variables from .env files and can encrypt them with a public key, so the encrypted file is safe to commit while the private decryption key stays out of the repository. It runs as a standalone CLI, so the same workflow applies to any language or runtime rather than Node.js alone.

passbolt_api

Passbolt is an open source password manager designed for teams. It allows users to securely store and share sensitive information such as passwords, API keys, and other credentials. Passbolt is built on top of a robust and scalable architecture, making it suitable for large organizations and enterprises.

Bitwarden

Bitwarden is an open-source password manager offering end-to-end encrypted storage for passwords, passkeys, and secure notes, with a notably generous free tier that includes unlimited passwords across unlimited devices. Its open-source codebase has been independently audited multiple times, appealing to security-conscious users. Browser extensions, desktop apps, and mobile apps cover every major platform, and a built-in password generator and security health reports help users identify weak or reused credentials. For organizations, Bitwarden offers self-hosting options in addition to its cloud service, giving companies full control over where vault data is stored, plus Secrets Manager for securing infrastructure credentials like API keys alongside end-user passwords.

shhgit

Shhgit is a tool designed to find secrets in your code. It scans your repositories for sensitive information that could compromise your security. By using shhgit, you can identify and remove secrets before they fall into the wrong hands.

gopass

gopass is a password manager designed for teams and individuals who need to securely store and share sensitive information. It provides a secure and scalable solution for managing passwords, API keys, and other secrets.