A command-line tool to encrypt and decrypt secrets using SSH keys.
ssh-vault is a command-line tool that encrypts and decrypts secrets using SSH keys. It allows users to protect sensitive data by encrypting it with a recipient's public SSH key, ensuring only the holder of the corresponding private key can access the content. This approach leverages existing SSH infrastructure for secure secret sharing and storage.
Developers, system administrators, and security-conscious users who need a simple, secure way to manage and share secrets like passwords, API keys, or configuration data using their existing SSH keys.
It offers a lightweight, dependency-free alternative to complex secret managers by utilizing the ubiquitous and trusted SSH key system, reducing setup overhead and enhancing interoperability with existing workflows.
🌰 encrypt/decrypt using ssh keys
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Uses existing public SSH keys for encryption, eliminating the need for a separate key management system, as emphasized in the project's philosophy.
Offers intuitive commands like 'create', 'view', and 'edit' for vault operations, making it easy to encrypt and decrypt secrets quickly.
As a Rust-compiled binary installable via Cargo or brew, it runs standalone without requiring additional services or complex setup.
Relies on trusted SSH cryptographic protocols, with fingerprint verification to ensure key authenticity and prevent tampering.
Does not support older RSA key formats, forcing users to convert keys with ssh-keygen, which can disrupt workflows with established key setups.
Requires users to handle storage and distribution of encrypted vault files themselves, lacking integrated backup, versioning, or synchronization features.
Access is limited to encrypting for specific SSH keys or GitHub users, without support for groups, role-based permissions, or easy revocation mechanisms.