phasehq/console

Application secrets and configuration management for developers.

devops
django
docker
dotenv
end-to-end-encryption
environment-variables
nextjs
open-source
python
react
secret-management
secrets
secrets-management
security
security-tools
self-hosting
typescript

Open source platform for fast-moving engineering teams to secure and deploy application secrets — from development to production.


Phase Console Demo

Features
📈 Phase Console: Dashboard for seamlessly creating, managing, rotating secrets, and environment variables
⌨️ CLI: Import existing secrets from .env files, and securely inject them in your application at runtime or create virtual shells with secrets
🤫 Secret management: Manage secrets across environments, view secret diffs, track version history, and restore secret values with a single click
🙋 Role-based Access Control: Fine-grained, role-based, and cryptographic access control, per application, per environment.
🔁 Secret sync: Automatically sync secrets to GitHub, Cloudflare Pages, Vercel, GitLab CI, Railway, AWS Secrets Manager, etc.
Kubernetes Kubernetes: Automatically sync secrets to your Kubernetes Cluster and reload deployments via the Phase Secrets Operator
Terraform Provider Terraform: Manage secrets in your HashiCorp Terraform Iac workflows.
⛓️ Secret referencing & overrides: Create personal secrets without affecting others on the team. Reference secret values across apps and environments
🌐 REST API: Access and manage secrets programmatically with any http client
📦 SDKs: SDKs for integrating Phase with various programming languages and frameworks
🥡 Self Hosting: Run Phase on your own infrastructure
🔍 Audit Logs: Complete visibility into every change and access event

Explore Phase Console


CLI

λ phase --help
Securely manage application secrets and environment variables with Phase.

           /$$
          | $$
  /$$$$$$ | $$$$$$$   /$$$$$$   /$$$$$$$  /$$$$$$
 /$$__  $$| $$__  $$ |____  $$ /$$_____/ /$$__  $$
| $$  \ $$| $$  \ $$  /$$$$$$$|  $$$$$$ | $$$$$$$$
| $$  | $$| $$  | $$ /$$__  $$ \____  $$| $$_____/
| $$$$$$$/| $$  | $$|  $$$$$$$ /$$$$$$$/|  $$$$$$$
| $$____/ |__/  |__/ \_______/|_______/  \_______/
| $$
|__/

options:
  -h, --help   show this help message and exit
  --version, -v
               show program's version number and exit
Commands:

    auth             💻 Authenticate with Phase
    init             🔗 Link your project with your Phase app
    run              🚀 Run and inject secrets to your app
    shell            🐚 Launch a sub-shell with secrets as environment variables (BETA)
    secrets          🗝️ Manage your secrets
    secrets list     📇 List all the secrets
    secrets get      🔍 Get a specific secret by key
    secrets create   💳 Create a new secret
    secrets update   📝 Update an existing secret
    secrets delete   🗑️ Delete a secret
    secrets import   📩 Import secrets from a .env file
    secrets export   🥡 Export secrets in a dotenv format
    users            👥 Manage users and accounts
    users whoami     🙋 See details of the current user
    users switch     🪄 Switch between Phase users, orgs and hosts
    users logout     🏃 Logout from phase-cli
    users keyring    🔐 Display information about the Phase keyring
    docs             📖 Open the Phase CLI Docs in your browser
    console          🖥️ Open the Phase Console in your browser
    update           🆙 Update the Phase CLI to the latest version

Explore Phase CLI


Getting started

Check out the Quickstart Guides

Use Phase Cloud

The quickest and most reliable way to get started is by signing up on the Phase Console.

Self-host Phase

Deploy Phase Console on your infrastructure
Docker Docker Compose
Kubernetes Kubernetes (Helm chart)
AWS AWS
AWS EKS AWS EKS (Helm chart)
GCP Google Cloud Platform
Azure Azure
DigitalOcean DigitalOcean
🥡 Self-hosting Phase

SDKs

More coming soon!


Community vs Enterprise edition

Phase operates on an open-core model, similar to that of GitLab.

This repo is available under the MIT expat license, with the exception of the ee directory which will contain Pro or Enterprise features requiring a Phase license.


Security

For more information on how Phase encryption works, please see the Security Docs

Please do not file GitHub issues or post on our public forum for security vulnerabilities, as they are public!

For more information see: SECURITY.md


Contributing

We love contributions. See CONTRIBUTING.md

You can join our Slack if you have any questions!

Stars
660
3.64% more than last month
Forks
41
Open Issues
47