← Back to glossary
🗝️

Secrets Management

Encryption

Principle of Least Privilege (PoLP) Cryptographic Key Management Audit Log Secret Key Key Vault

Tooling and processes for secure secret storage, access control, auditing, and rotation (often via vault services).

Definition

Secrets management systems store secrets encrypted, provide controlled access (often short-lived credentials), audit usage, and support rotation. They reduce secret sprawl across code and laptops.

In plain English Tooling and processes for secure secret storage, access control, auditing, and rotation (often via vault services).

Why this matters

Why it matters: Better secret hygiene reduces breach risk and supports incident response.

Example

Example: Use a vault to issue short-lived database creds, log access, and rotate secrets automatically.