Ask HN: Where do you save your API keys?

8 pointsandrea812y ago6 comments

Is there any specific on-line service to store API keys?

6 comments

Doppler (https://doppler.com) is my preferred tool for storing API keys. It centralizes where you manage all of your environmental variables and makes it so you never risk exposing your API keys in a code repo. There's a CLI tool that makes it easy to use all of your environment variables while you're developing and a ton of integrations for wherever you prefer to deploy your code. Feel free to ask me anything about Doppler or secrets management - I'm a developer advocate at Doppler.

hitpointdrew2y ago

Looks like you are SOC 2 Type II compliant, which is better than nothing. However, it is very difficult for my organization to work with 3rd parties that are not ISO 27001 certified. Is Doppler working on ISO 27001 certification?

AlwaysNewb232y ago

Doppler is exploring adding the ISO 27001 certification in the near future.

vmatsiiako2y ago

Check out Infisical: https://infisical.com

We help developers manage API keys, DB access tokens, certificates, and other types of secrets across all of their infrastructure – providing smooth native integrations with k8s, terraform, github actions, any local development setup, and much more.

Disclaimer: I'm one of the founders.

cranberryturkey2y ago

i have a private repo with a script that backs all my .env* files up and then encrypts them and pushes them to github.

stop502y ago

hashicorp Vault

j / k navigate · click thread line to collapse