Skip to content

Passwords & security

OpenBao

Free softwareOpen sourceBrowser

Run your own application-secret store with policies, API access and workload authentication.

What you can use it for

Run your own application-secret store with policies, API access and workload authentication.

  • No per-user or project subscription for the open-source distribution.
  • Key/value secrets and policies for applications that can use its API or Vault-compatible tooling.
Workflow coverage and comparison notes

Store API credentials, certificates and encryption keys within a community-governed open-source KMS using OpenBao instead of proprietary Akeyless cloud.

Before you switch

Free software, not free managed hosting. You pay for any server, persistent storage, backup destination and operational time; cloud KMS auto-unseal can add per-key and API charges. No model API is required. Initialisation, unseal-key recovery, policies, upgrades, audit storage and secure backups are your responsibility. Not a drop-in replacement for Doppler native sync integrations or its managed control plane; application wiring changes are needed. Do not reuse development mode or insecure auto-unseal shortcuts for production. It is not a consumer password manager.

Alternatives to these paid apps

Each comparison covers the workflow described above, rather than every paid feature.