Secret backends
Bring your own key management.
KeyProvider
The master encryption key is sourced through a KeyProvider abstraction, so you can keep it in an environment variable or in an external manager without changing the encrypt/decrypt surface.
- HashiCorp Vault (KV v1/v2 over the HTTP API)
- AWS Secrets Manager
- Azure Key Vault
- Environment / KMS
Try it yourself
Open the console and put this into practice.