Sharing secrets with teams
Here at Sniptt, we have lost count of how many times a colleague has asked us to securely share an API key, a database password, or an environment configuration file and we have not had an easy-to-use tool at our disposal that would help us do this efficiently.
We have worked with many different engineering teams over the past few years, and when it comes to sharing secrets what we have seen is that most small to medium-size teams eventually decide to either:
Undoubtedly, there are teams who have successfully adopted HashiCorp Vault, SOPS, or similar, but the reality is that most advanced solutions available today are simply too cumbersome to configure and difficult (or expensive) to maintain.
Like many of you, we use password managers on a daily basis to help us create and manage passwords for (primarily) web-based services such as ProtonMail or GitHub.
However, when it comes to sharing secrets with others quickly and securely, we have found that password managers fall short in 3 main categories:
