Vault Documentation

Centralize secret management, rotate old credentials, generate credentials on demand, audit client interactions, and support regulatory compliance.

Run Vault on the HashiCorp Cloud Platform (HCP)

Manage static secrets
Store, rotate, and encrypt arbitrary strings
Manage certificates
Integrate with certificate authorities like KMIP and PKI to manage certificate life cycles and authenticate clients
Manage identities and authentication
Control client access to sensitive information with managed entities, identity tokens, OIDC workflows, and workload identity federation (WIF)
Manage 3rd-party secrets
Generate and revoke on-demand credentials and control access to external encryption keys and cloud credentials
Manage sensitive data
Encrypt or tokenize sensitive data in transit and at rest
Support regulatory compliance
Use Vault as part of an HSM solution, FIPS compliant architecture, or PKCS11 authN workflow