Infisical

Infisical is an open-source security infrastructure platform developed to manage application secrets, certificates, and privileged access. It allows for central management of secrets, versioning, rotation, and prevention of leaks. It also offers integration support with dynamic secret production, Kubernetes operator, and various cloud platforms.

IN

Infisical · Passwords & Privacy

STARS30.2K
FORKS2.4K
COMMITS—
CONTRIBUTORS255
VERSIONv0.85.0-postgres
UPDATEDtoday
Secrets ManagementSelf-HostedTypeScriptDevOpsMIT

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • You manage application secrets and configuration settings through a central interface.
  • You automatically synchronize secrets with external platforms such as GitHub, Vercel, and AWS.
  • You ensure infrastructure security with dynamic secret production and leak prevention tools.
Heads up
  • • High number of open issues (868)
User reviews
  • • NeutralHacker News

    Infisical – open-source HashiCorp Vault alternative

    “Hey! Definitely, we have more details on the cryptography in our documentation here: . Put simply, Infisical operates E2EE by default which means the platform itself can’t decrypt secrets. This is unless you opt out of E2EE (secrets remain encrypted at rest) to use select…”

  • • NeutralHacker News

    Infisical – open-source HashiCorp Vault alternative

    “Maybe I'm missing something, but Infisical ONLY seems to handle shared secrets. Vault handles a lot more, it can for instance create DB users on the fly, with the right permissions that will only live for as long as the vault token does. Vault also has a full CA system in-place,…”

Verified against README · Oct 26, 2026 · source

My note

Alternative pages

More in: Passwords & Privacy