Bitwarden Secrets Manager by Bitwarden is designed for developer teams to store, manage, and deploy privileged secrets, focusing on infrastructure secrets. It supports the web app and CLI clients, ensuring high availability with multiple secret backup options. Integrations like Bitwarden Secrets Manager Kubernetes Operator act as a caching layer for fetched secrets, and SDKs allow secrets to be cached locally. Self-hosting Secrets Manager ensures secrets are available if you cannot connect to Bitwarden cloud. It protects infrastructure and development pipelines from secret leaks. Bitwarden Secrets Manager centralizes secret storage in a single, end-to-end encrypted solution, preventing secret leaks and securing the codebase. It allows secure storage and management of secrets like database passwords and API keys, and facilitates collaboration and sharing of secrets across users and machines. The Secrets Manager CLI is the primary method to inject secrets into applications and infrastructure. It maintains control over access to developer secrets with granular read or read/write permissions, and supports setting expiration dates for machine access to secrets or revoking access as needed. It adopts secure authentication methods like single sign-on, trusted devices, biometrics, or passkeys, and logs secret retrieval with timestamped records of events. Bitwarden Secrets Manager leverages existing directory services to automatically provision users and can be deployed fast and efficiently in the cloud or self-hosted with ease if IT and infrastructure resources are available. It supports unlimited secrets, users, and projects, and allows securely sharing secrets with users across the organization. Machine access via machine accounts facilitates programmatic access to a discrete set of secrets. It organizes secrets via projects, grouping relevant secrets together by project to easily assign user and machine access. It uses zero knowledge, end-to-end AES-256 bit encryption, salted hashing, and a PBKDF2 SHA-256 authentication process to ensure security.
