With Secrets Manager, you can create, lease, and centrally manage secrets that are used in IBM Cloud services or your custom-built applications. Secrets are stored in a dedicated instance of open-source HashiCorp Vault, hosted by IBM Cloud.

Manage application secrets in your own dedicated secrets store, built on open-source HashiCorp Vault. Whether you’re a developer who requires only a few secrets or a large enterprise that needs millions, Secrets Manager can scale to your needs.

Save time with platform integrations that help you to create and lease time-based secrets, such as API keys, passwords, and database configurations, as you use supported IBM Cloud offerings.

If you need to comply with strict guidelines for generating secrets on-premises, you can extend your existing secrets management infrastructure by securely importing secrets into Secrets Manager.

Secrets Manager integrates with Cloud Identity and Access Management (IAM) so that security admins can organize and grant access to secrets by using secret groups.

Enhance the security of your secrets at rest with IBM Key Protect. When you select a Key Protect encryption key as the root of trust for your Secrets Manager service instance, you enable advanced, customer-managed encryption for your secrets.