VaultPass: Enabling Teams to Share Secrets Confidentially

on YouTube ↗28m

" summary

Browser extension that reads secrets from a HashiCorp Vault key-value store and autofills logins in Chrome and Firefox, backed by a Docker dev Vault at localhost:8200 with a test user (mitchellh / foo) for the demo. Current auth mounts: userpass and LDAP. Published users: ~417 Chrome, ~47 Firefox, ~30% growth in six months. Server policy model uses vault kv v2 metadata/data paths; missing items include SSO flow, in-extension secret creation, KeePass import, and improved URL matching.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 0:26Why VaultPass was created
3. 10:14Problems with KeePassXC setup
4. 11:19VaultPass architecture
5. 15:34VaultPass usage demo
6. 20:34Vault policies for access control
7. 23:24Future of VaultPass

" related talks

• 43mSecret Management with Hashicorp's VaultDaniel Bornkessel · GOTO Berlin 2018
• 51mIntroduction to VaultSeth Vargo · GOTO London 2015
• 38mKeeping Secrets - A Practical Approach to Managing CredentialsChris Antenesse · ChefConf 2017
• 40mA Better Way To Manage SecretsJohnny T · Ruby Hack 2019
• 30mEfficiently share and manage secrets across applications with HashiCorp VaultMizan Rahman · HashiConf 2024
• 41mHiding secrets in a VaultStjepan Hadjić · Voxxed Days Vienna 2017
• 28mSecret Management with Hashicorp´s VaultDaniel Bornkessel · ContainerDays Hamburg 2018
• 50mDevOps: Shhhh! It's a secret! - HashiCorp VaultGrzegorz Piotrowski · 4Developers 2020