Secrets management

Infisical Secrets Management centralizes secrets such as API keys, database credentials, and application configuration. Teams eliminate hardcoded secrets, scope access by environment and path, and deliver secrets to applications and infrastructure through the CLI, SDKs, agents, Kubernetes, and CI/CD.

<Tip> Visual learner? Watch an [introduction to secrets management with Infisical](https://www.youtube.com/watch?v=BMeng7nkRYs). </Tip>

Get started

<Card title="Deliver Your First Secret" icon="rocket" href="/documentation/platform/secrets-mgmt/quick-starts/deliver-first-secret"> New to Infisical? Store a secret and deliver it to an application in under 10 minutes. </Card>

Learn more

<CardGroup cols={2}> <Card title="Core Concepts" icon="book" href="/documentation/platform/secrets-mgmt/concepts/secrets-mgmt"> Understand how projects, environments, folders, and secrets fit together. </Card> <Card title="Deliver Secrets" icon="map" href="/integrations/all"> Find a delivery workflow for your application or infrastructure. </Card> <Card title="Access Control" icon="shield-halved" href="/documentation/platform/secrets-mgmt/concepts/access-control"> Scope secrets by environment and path, and control who can access them. </Card> <Card title="Secrets Delivery" icon="truck-fast" href="/documentation/platform/secrets-mgmt/concepts/secrets-delivery"> Pick the right method to get secrets into your applications and infrastructure. </Card> </CardGroup>

Go further

<CardGroup cols={2}> <Card title="Secret Rotation" icon="rotate" href="/documentation/platform/secrets-mgmt/concepts/secrets-rotation"> Replace database and cloud credentials automatically on a schedule. </Card> <Card title="Dynamic Secrets" icon="bolt" href="/documentation/platform/secrets-mgmt/concepts/dynamic-secrets"> Generate short-lived credentials on demand that expire after use. </Card> <Card title="Secret Syncs" icon="arrow-right-arrow-left" href="/integrations/secret-syncs/overview"> Push secrets to GitHub, AWS, Vercel, and other external platforms. </Card> <Card title="Honey Tokens" icon="jar" href="/documentation/platform/honey-tokens/overview"> Plant decoy credentials that alert you the moment an attacker uses them. </Card> <Card title="Approval Workflows" icon="code-pull-request" href="/documentation/platform/secrets-mgmt/concepts/approval-workflows"> Require review before changes reach sensitive environments. </Card> <Card title="Point-in-Time Recovery" icon="clock-rotate-left" href="/documentation/platform/pit-recovery"> Roll back a secret or an entire environment to any previous state. </Card> </CardGroup>