Ask HN: Where do you save your API keys?

https://news.ycombinator.com/item?id=39360336

by andrea81 • 2 years ago

8 6 2 years ago

news.ycombinator.com

Is there any specific on-line service to store API keys?

cranberryturkey• 2 years ago

i have a private repo with a script that backs all my .env* files up and then encrypts them and pushes them to github.

stop50• 2 years ago

hashicorp Vault

AlwaysNewb232• 2 years ago

Doppler (https://doppler.com) is my preferred tool for storing API keys. It centralizes where you manage all of your environmental variables and makes it so you never risk exposing your API keys in a code repo. There's a CLI tool that makes it easy to use all of your environment variables while you're developing and a ton of integrations for wherever you prefer to deploy your code. Feel free to ask me anything about Doppler or secrets management - I'm a developer advocate at Doppler.

hitpointdrew• 2 years ago

Looks like you are SOC 2 Type II compliant, which is better than nothing. However, it is very difficult for my organization to work with 3rd parties that are not ISO 27001 certified. Is Doppler working on ISO 27001 certification?

AlwaysNewb232• 2 years ago

Doppler is exploring adding the ISO 27001 certification in the near future.

vmatsiiako• 2 years ago

Check out Infisical: https://infisical.com

We help developers manage API keys, DB access tokens, certificates, and other types of secrets across all of their infrastructure – providing smooth native integrations with k8s, terraform, github actions, any local development setup, and much more.

Disclaimer: I'm one of the founders.

Ask HN: Where do you save your API keys?

Related Stories