Manage Secrets & Protect Sensitive Data
Secure, store, and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets, and other sensitive data using a UI, CLI, or HTTP API.
Learn more about Vault features
Use Vault to securely store, access, and manage secrets and other sensitive data.
HCP Vault Dedicated
Secure your applications and protect sensitive data
Try HCP Vault Dedicated for free
Vault sandbox
The Vault sandbox contains preinstalled tools and services for you to experiment with Vault.
8 tutorials
Secrets management
Store, access, and deploy secrets for applications, systems, and infrastructure.
6 tutorials
Database credential management
Secure database access and manage the database credential lifecycle with Vault's database secrets engine.
5 tutorials
Encrypt data
Vault provides Encryption as a Service (EaaS) to enable security teams to fortify data during transit and at rest. So even if an intrusion occurs, your data is encrypted and the attacker would never get a hold of the raw data.
3 tutorials
Prepare for the Vault Associate (003) certification exam
Prepare for the Vault Associate certification exam. Choose to follow an in-depth guide or to review select exam topics depending on the kind of preparation support you need. Then review sample questions to learn what to expect on exam day.
3 tutorials
Prepare for the Vault Operations Professional certification exam
Prepare for your Vault Professional certification exam. Choose to follow an in-depth guide or to review select exam topics depending on the kind of preparation support you need. Then explore an exam orientation guide to learn what to expect on exam day.
Secure data
Learn about best practices for securing your data in the HashiCorp Well Architected Framework.
Secure secrets
Learn about best practices for securing your secrets in the HashiCorp Well Architected Framework.
Identity and access management
Learn how to design a strong identity and access management strategy in the HashiCorp Well Architected Framework.
Secure infrastructure
Learn about best practices for designing a zero-trust architecture in the HashiCorp Well Architected Framework.
Key/Value Secrets Engine
Key-value store used to persist arbitrary secrets within the configured physical storage for Vault.
Database Secrets Engine
Dynamically generates database credentials based on pre-configured roles.
Transit Secrets Engine
Encrypt data in-transit to provide encryption as a service.
Transform Secrets Engine
An Enterprise feature generates cryptographically secure tokens mapped to secure highly sensitive data.