Manage Secrets & Protect Sensitive Data

Install
Tutorials
Documentation
Integrations

What is Vault?

Secure, store, and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets, and other sensitive data using a UI, CLI, or HTTP API.

Learn more about Vault features

Getting Started

Use Vault to securely store, access, and manage secrets and other sensitive data.

CLI Quick Start

Developer Quick Start

HCP Vault Dedicated

Secure your applications and protect sensitive data

Try HCP Vault Dedicated for free

Use Cases

19 tutorials

Secrets management
Centrally store, access, and deploy secrets across applications, systems, and infrastructure.
- Vault
7 tutorials

Database credential rotation
Automatically rotate database credentials with Vault's database secrets engine to secure the database access.
- Vault
6 tutorials

Advanced data protection
Advanced Data Protection is a Vault Enterprise module focused on securely connect, control, and integrate advanced encryption keys. Learn features that provide advanced data protection.
- Vault

Get Certified

3 tutorials

Prepare for the Vault Associate (002) certification exam
Prepare for your Vault Associate 002 certification exam. Choose to follow an in-depth guide or to review select exam topics depending on the kind of preparation support you need. Then review sample questions to learn what to expect on exam day.
- Vault
3 tutorials

Prepare for the Vault Operations Professional certification exam
Prepare for your Vault Professional certification exam. Choose to follow an in-depth guide or to review select exam topics depending on the kind of preparation support you need. Then explore an exam orientation guide to learn what to expect on exam day.
- Vault

Popular Vault Features

Key/Value Secrets Engine
Key-value store used to persist arbitrary secrets within the configured physical storage for Vault.
Database Secrets Engine
Dynamically generates database credentials based on pre-configured roles.
Transit Secrets Engine
Encrypt data in-transit to provide encryption as a service.
Transform Secrets Engine
An Enterprise feature generates cryptographically secure tokens mapped to secure highly sensitive data.