Keywhiz
lastmod 2026-11-10created 2022-03-232 edits
Keywhiz is a system made by Square for distributing and managing secrets. It encrypts sensitive values such as TLS certificates, database passwords, and API keys and stores them on a central server, and on each server a FUSE file system-based client exposes them as in-memory files so applications can read them like ordinary files. It identifies clients with mutual TLS authentication and manages access permissions per group, and it is a tool in a similar category to HashiCorp Vault.
A system for distributing and managing secrets