04.6.6 · Skill in Security and privacy engineering
Secrets management
Handling API keys, passwords and certificates safely.
Secrets belong in a secrets manager or environment configuration, never in code or logs. Rotation and limited scope reduce the damage when one leaks. Leaked keys in repositories are still one of the most common incidents.
Resources
1- docsGo deeperSecrets management cheat sheet ↗OWASP · 35 min
Keeping keys and passwords out of code, rotating them, and giving each service only what it needs.
Tools
1- ToolOpen sourceInfisical
Open-source secrets manager for syncing keys and credentials to apps and pipelines.