Hey Product Hunt 👋,
We're back again with a new launch! We've shipped a ton of new useful features, improved DX, and polished the UI considerably.
TL;DR - How Phase works:
Instead of hard-coding secrets into your code or using .env files and sharing them over Slack or Discord:
📩 Simply drag and drop your existing secrets into Phase or import via the CLI by running "phase secrets import .env"
🚀 Create a virtual shell with secrets as environment variables by running "phase shell" or inject them into your application at runtime by running "phase run node index.js"
🔄 Keep your secrets secure and always in-sync with your teammates across environments like dev, staging, prod, etc.
🏗️ Phase also integrates with other tools and services you may be using, such as GitHub, Docker, Kubernetes, Cloudflare, AWS, and many more. Phase will automatically deploy your secrets and configs to these services, giving you a single source of truth across your team and infrastructure.
🔐 We take the complexity out of securing your secrets by using End-to-End Encryption, Role-based Access Control, Audit logging and Network Access Policies.
👩💻 We believe in shifting security left and providing an uncompromising, seamless developer experience — something we found lacking in existing tools like HashiCorp Vault or AWS Secrets Manager.
We're excited for all of you to try it! ❤️
You can get started with a free account on Phase Cloud, or self-host Phase with no restrictions on your own infrastructure.
Check out our GitHub: https://github.com/phasehq/console
Join our Slack community: https://slack.phase.dev
Follow us on X: https://x.com/phasedotdev
Congrats on the launch! As a backend dev, managing secrets is always a pain—excited to try Phase. How do you handle secret rotation in multi-environment setups? Looking forward to testing it in our stack!
Since Phase is a newer tool compared to established options like Vault or AWS Secrets Manager, and some organizations may hesitate to trust a third-party cloud with their secrets, even with end-to-end encryption, how do you address concerns about Phase’s security and reliability for teams considering adoption?
Replies
Phase
Congrats on the launch! As a backend dev, managing secrets is always a pain—excited to try Phase.
How do you handle secret rotation in multi-environment setups? Looking forward to testing it in our stack!
Since Phase is a newer tool compared to established options like Vault or AWS Secrets Manager, and some organizations may hesitate to trust a third-party cloud with their secrets, even with end-to-end encryption, how do you address concerns about Phase’s security and reliability for teams considering adoption?
Phase
Hey@vouchy Great question!
Phase is open source and can be easily self-hosted on your own cloud or server. https://docs.phase.dev/self-hosting
If you are interested in digging deeper into your cryptographic implementation and security architecture, please see: https://docs.phase.dev/security/architecture.
Open-source secrets manager? Yes please! 🔐🛠️ Big win for devs who care about security & control. 👏🚀