Phase
Built by phasehq
End-to-end encrypted secrets management for your apps, teams and AI agents.
About
What it does
Phase keeps API keys, passwords and environment variables safe and in sync. Secrets are encrypted end to end, so only the people and machines you authorize can ever read them.
It replaces scattered .env files with a single source of truth, and syncs secrets into your apps, CI pipelines and cloud platforms automatically.
Highlights
- End-to-end encryption
- Environments, version history and rollbacks
- CLI and SDKs that inject secrets at runtime
- Syncs to GitHub, Kubernetes, cloud providers and more
- Access control and audit logs
Who it's for
Teams that are done sharing secrets over chat and .env files.
Readme
from the project's repository
Show the full readme from GitHub
Phase
Secrets management for teams and AI agents.
Community vs Enterprise edition
Phase operates on an open-core model, similar to that of GitLab.
This repo is available under the MIT expat license, with the exception of the ee directory which will contain Pro or Enterprise features requiring a Phase license.
Security
For more information on how Phase encryption works, please see the Security Docs
Please do not file GitHub issues or post on our public forum for security vulnerabilities, as they are public!
For more information see: SECURITY.md
Contributing
We love contributions. See CONTRIBUTING.md
You can join our Slack if you have any questions!