Nimish K

Phase - Open source application secrets manager

by

Open source platform for fast-moving engineering teams to secure and deploy application secrets — from development to production.

Add a comment

Replies

Best
Nimish K
Maker
📌
Hey Product Hunt 👋, We're super excited to launch the new and improved Phase! 🔥🔥 Phase is an easy-to-use application secrets manager for developers. Instead of hard-coding secrets into your code or using .env files and sharing them over Slack. 📩 Simply import your existing secrets into Phase via the CLI by running: phase secrets import .env 🚀 Then inject them into your application at runtime by running: phase run node index.js 🔄 This keeps your secrets secure and always in sync with your teammates across dev, staging, and prod environments. 🏗️ Phase also integrates with other tools and services you may be using, such as GitHub, Docker, Kubernetes, and AWS. Phase will automatically deploy your secrets and configs to these services, giving you a single source of truth across your team and infrastructure. 🔐 We take the complexity out of securing your secrets by using end-to-end encryption, audit logging, role-based access policies, and IP whitelisting. 👩‍💻 We believe in shifting security left and providing an uncompromised, seamless developer experience — something we found lacking in existing tools like HashiCorp Vault or AWS Secrets Manager. We're excited for all of you to try it! ❤️ Check out our GitHub: https://github.com/phasehq/console Join our Slack community: https://slack.phase.dev
Jerric Lyns John
what's different about this from Infisical
Nimish K
Hey @jerriclynsjohn 👋 Infisical is great. I think you will find a significant improvement in DX with Phase, as well as a more thorough and considered approach to the security model. We also have a wider vision of application security that we want to expand into beyond just application secrets!
Kyrylo Silin
Hey, Questions: 1. How does it handle secret rotation and versioning? 2. For teams transitioning from other secret management tools, do you offer any migration utilities or guides to help streamline the process? Congrats on the launch!
Nimish K
Hey @kyrylosilin Great questions! 👋 1. Secret rotation and versioning: You can set up auto-rotation for secrets on your preferred schedule. There's also a git-style history view where you can see all secret changes over time and roll back to previous versions if needed. 2. Migration: Yes, we have guides for importing secrets from certain secret managers like Hashicorp Vault and AWS Secrets Manager at this time, but we can certainly create a new guides and offer migration assistance if you're using something else. Cool if I DM on Twitter/X?
Christofer Huber
Hey @nimishk, this is a great tool. When you work with a distributed team it is always a real pain to share secrets and credentials. I also love the fact that you offer a self-hosted version. Especially in Europe a lot of companies insist on hosting on premise 😅 Congrats on the launch! 🚀
Mary Garcia
Phase looks like a solid tool for managing secrets in a secure and efficient way. I’ve used similar tools, but the ease of integration with other services like GitHub and AWS really sets this apart. Quick question—does it support multiple environments out of the box, like dev,staging,and prod?Thanks!
Rohan Chaturvedi
Hey @marygarcia, It does indeed ship with dev, staging and prod environments as default, with full support for custom environments as well!
Ali Eskandari
worked with many open source clients and this is is def something they would love. Congrats on the launch!
Congrats!!! We're very excited for the launch the new Phase!
Claudia Dennis
Great launch! This is a tool that’s going to make a real difference for our developers in office
Elke
This looks fantastic, @nimishk! The ease of integrating with tools like GitHub and AWS is a game-changer for teams. Excited to see how Phase can streamline secrets management! Upvoted! 🚀
Antoine Gauthier
Loving the direction Phase is going, @nimishk! 🔥 The integration with tools like GitHub and AWS is a game changer for secure deployments. Can't wait to try it out! Upvoted! 🚀
Prathamesh Sujgure
Congrats on launch. This is cool we have a open source secret manager. Keep up the good work!
Maxime Dolores
any differentiating feature from infisical?
Rohan Chaturvedi
Hey @m_dolr 👋 We have focused primarily on developer experience and reducing friction to let developers focus on what they do best: build and ship code! Phase is security-focused developer tool, but we believe that developer tools should ease developer productivity first and foremost, and that this will inherently drive adoption and improve security in an organization. We've also built Phase on a sophisticated end-to-end encryption architecture that we have built from the ground up for the unique requirements of secrets management in teams of all sizes. You can find out more about that on our docs: https://docs.phase.dev/security/...
Maxime Dolores
@rohan_chaturvedi what would be a reason to switch from infisical to phase ?
Ema Elisi
Nice launch, @nimishk! 🎉 Finally, a way to stop password-sharing chaos. Can't wait to see this in action across my projects. Upvoted! 💯
Ghost Kitty
Comment Deleted
Star Boat
Congrats on the launch of Phase, @nimishk! 🎉 As someone who’s seen the challenges of managing application secrets firsthand, this tool looks like a lifesaver. The seamless integration with existing workflows—whether it's GitHub, Docker, or AWS—along with end-to-end encryption, makes Phase a must-have for fast-moving engineering teams. Can’t wait to dive into the GitHub repo and give Phase a try in our next project. Upvoted and looking forward to seeing how this evolves! 🚀
Negou Seid
Great job! I love the home page! it's a great walk-through of the product. It's so easy to see how it works without doing any extra digging. I have many API keys lying around, I will try this out!
Rai Sen
worked with many open source clients and this is is def something they would love. Congrats on the launch...!!
Tiger L
Looks great. Your focus on simplifying the process and enhancing security truly addresses a key pain point. Wishing you success with this launch!
Matej Bendík
Congrats on the launch! The tool looks pretty useful.
Micha Cassola
I would love something like this for SSH keys. Maybe with local encryption and decryption on demand with some other key, like a smart card or something like that.
Rohan Chaturvedi
@michacassola that's a great suggestion and one we have been thinking about as well! Stay tuned!