Skip to content

Password Vaults and Secrets Managers — What They Are and How to Set One Up

Overview of password vaults vs secrets managers — personal vs application-level credential storage

11 min readsecurity, secrets-management, password-managers, tools

At this point you know that secrets shouldn't live in your code. They go in .env files locally and in environment variables in production. But there's a bigger question: where do you keep all the passwords, API keys, and credentials that you personally need to manage?

If the answer is "in my head," "in a text file on my desktop," or "I use the same password for everything," we need to talk.

Two Problems, Two Tools

There are actually two different credential management problems:

Problem 1: Personal credentials. Your logins for GitHub, AWS, Stripe, email, banking — everything you sign into. This is about protecting you as a person.

Problem 2: Application credentials. The API keys, database passwords, and tokens that your apps need to run. This is about protecting your depl

This lesson is part of the Guild Member curriculum. Plans start at $29/mo.