Web UI

Vault features a user interface (web interface) for interacting with Vault. Easily create, read, update, and delete secrets, authenticate, unseal, and more with the Vault UI.

» Dev servers

When you start the Vault server in dev mode, Vault UI is automatically enabled and ready to use.

$ vault server -dev
...

Open a web browser and enter http://127.0.0.1:8200/ui to launch the UI.

Enter the initial root token to sign in.

» Non-Dev servers

The Vault UI is not activated by default. To activate the UI, set the ui configuration option in the Vault server configuration.

ui = true

listener "tcp" {
  # ...
}

storage "consul" {
  # ...
}

The UI runs on the same port as the Vault listener. As such, you must configure at least one listener stanza in order to access the UI.

Example:

ui = true

listener "tcp" {
  address = "10.0.1.35:8200"

  # If bound to localhost, the Vault UI is only
  # accessible from the local machine!
  # address = "127.0.0.1:8200"
}
...

In this case, the UI is accessible the following URL from any machine on the subnet (provided no network firewalls are in place): https://10.0.1.35:8200/ui

It is also accessible at any DNS entry that resolves to that IP address, such as the Consul service address (if using Consul): https://vault.service.consul:8200/ui

» Web UI Wizard

Vault UI has a built-in guide to navigate you through the common steps to operate various Vault features.