Pick #1
Bitwarden
Separate Secrets Manager with a free plan for 3 projects and 3 machine accounts, plus an SSH agent in the desktop app.
Independent reviews. Vendors can't pay for a ranking or a better score.How we review
We may earn a commission from some links. Disclosure
VPN and Security · password manager for developers
Password managers that also handle SSH keys, command-line secrets and CI/CD pipelines, compared from their own documentation and pricing.
Drafted with AI assistance from the sources listed on this page and checked against our editorial rules. AI usage policy
Developers keep more than website logins: SSH keys, API tokens and the secrets that applications and pipelines need. The OWASP Secrets Management Cheat Sheet recommends storing them centrally, limiting who can read each one, rotating them regularly and logging every access. A password manager with developer tools can do much of that without plaintext .env files.
Both products here have reviews on this site and both cover the basics: an SSH agent that signs Git commits, a command-line tool and a way to inject secrets at runtime. They differ in how the developer tools are packaged and priced, which the reasons below spell out.
Pick #1
Separate Secrets Manager with a free plan for 3 projects and 3 machine accounts, plus an SSH agent in the desktop app.
Pick #2
Its CLI loads secrets from 1Password Environments, and its SSH agent signs Git commits without keys leaving 1Password.
Every pick follows our Security methodology, and each review says whether it was researched or tested hands-on.
How we review security softwarePicks are ordered by their review score.