Security and privacy · Independent · 20 Oct 2026

phasehq/console

Secrets management for teams and AI agents.

← Security and privacy
Phase: secrets management. Stores keys and tokens for teams and AI agents.

In simple English

This tool keeps your passwords and digital keys in one safe place. You can share them with your team and with automated programs without sending them in chat messages. It encrypts everything so outsiders cannot read it. You can run it on your own server or use the cloud version. It is free to try, but some advanced team features need a paid plan.

What it is

Phase is an open-source secrets manager (a secure vault for storing sensitive passwords and API keys). It provides an encrypted store and command-line tools to fetch those values when your programs run.

What it is good for

Solo builders who want to stop putting passwords in plain text files and need a safe way to share keys with helpers or automated tools.

Stars931
LicenceCustom
Latestv2.77.3 (2026-10-09)checked 20 Oct 2026
Last code change2026-10-20
Written inTypeScript
Setup effort
3 / 5
Payoff
4 / 5
Good
  • Encrypts all your sensitive keys before saving them.
  • Includes command-line tools to fetch keys on your server.
  • Works with AI agents that need temporary access tokens.
Watch for
  • Requires Docker (a way to run a program inside its own sealed box, so it cannot break anything else on your server) to self-host easily.
  • Some enterprise features require a paid licence.
  • Setup takes time if you are new to managing self-hosted databases.
Replaces

Putting passwords in plain .env files or sharing them in chat apps.

Works well with

Docker (a way to run a program inside its own sealed box, so it cannot break anything else on your server) to host the vault.

Similar repositories
  • Infisical/infisical30k stars

    An open-source secrets manager with a similar focus on team sharing and encryption.

  • DopplerHQ/cli398 stars

    A managed secrets tool that helps you sync environment variables across machines.

Also reviewed on Repo Radar
  • future-architect/vuls12k stars

    Scans Linux machines over SSH for installed software with publicly reported security holes.

  • cossacklabs/acra1.5k stars

    A proxy that encrypts individual database fields on the way in and decrypts them on the way out.

  • 0xERR0R/blocky7.0k stars

    A small DNS service for a home or office network that refuses to look up advertising and tracking addresses.

Install
git clone https://github.com/phasehq/console.git
cd console
docker compose up -d

Independent: reviewed for Repo Radar outside the daily editions. Every independent repository

On Stack Radar: Infrastructure & Security › Security & Compliance › Secrets Management.

Get the next edition in your inbox

A dozen repositories, opened and checked. The licence read, the last release dated, and the ones that did not make it named with the reason. It is the half most lists leave out.

No tracking pixels. One click to leave. The archive stays free either way.

We use your address to send the edition and nothing else. Confirm by email, leave in one click. How we handle it.