HashiCorp Learn
Infrastructure
  • TerraformTerraformLearn terraformDocs
  • PackerPackerLearn packerDocs
  • VagrantVagrantLearn vagrantDocs
Security
  • VaultVaultLearn vaultDocs
  • BoundaryBoundaryLearn boundaryDocs
Networking
  • ConsulConsulLearn consulDocs
Applications
  • NomadNomadLearn nomadDocs
  • WaypointWaypointLearn waypointDocs
  • HashiCorp Cloud Platform (HCP) LogoHashiCorp Cloud Platform (HCP)HashiCorp Cloud Platform (HCP)Docs
Type '/' to Search
Loading account...
  • Bookmarks
  • Manage Account
Get Started
  • CLI Quick Start
  • HCP Vault
  • UI Quick Start
Use Cases
  • ADP
  • Data Encryption
  • Secrets Management
Certification Prep
  • Associate
Production
  • Day One Consul Storage
  • Day One Integrated Storage
  • Enterprise
  • Monitor & Troubleshoot
  • Recommended Patterns
Integrations
  • App Integration
  • HashiCorp Products
  • Kubernetes
Operations
  • Auth Methods
  • Auto Unseal
  • Fundamentals
  • Integrated Storage
  • Policies
Zero Trust Security: Visit

Get Started

Getting StartedVault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Get started here.
Getting Started with Vault UIManage Vault environment as well as your secrets using Vault UI.
HCP VaultQuickly get hands-on with HashiCorp Cloud Platform (HCP) Vault using the HCP portal and setup your managed Vault cluster.
Interactive LabsLearn by doing! Use Vault on real infrastructure in your web browser.

Featured Collections

Extend your knowledge of Vault features and use cases.

Vault 1.6 Release HighlightsIntroducing new Vault 1.6 features and updates to the existing feature tutorials.
KubernetesVault secures, stores, and tightly controls access to passwords, certificates, and other secrets in modern computing. Here are a series of tutorials that are all about running Vault on Kubernetes.
Monitoring & TroubleshootingVault monitoring and troubleshooting tutorials that help you inspect your Vault environment.
Product Certification Exam PrepStudy and review guides for the HashiCorp Certified: Vault Associate exam.

Tech Preview Features

Try those exciting new Tech Preview features to learn its potential.

Enterprise

[Tech Preview] Key Management Secrets Engine

Vault 1.6 introduces a secrets engine designed to help with cloud provider key lifecycle management.

vault is used in this tutorial10 min
Enterprise

[Tech Preview] Tokenize Data with Transform Secrets Engine

Transform secrets engine introduced tokenization data transformation in Vault 1.6. This functionality provides maximum resistance to data being compromised.

vault is used in this tutorial12 minInteractive

All Vault Tutorials

Advanced Data Protection
    Transform Secrets Engine[Tech Preview] Tokenize Data with Transform Secrets EngineKMIP Secrets Engine[Tech Preview] Key Management Secrets Engine
App Integration
    Secure Introduction of Vault ClientsVault Agent with AWSVault Agent with KubernetesVault Agent CachingDirect Application IntegrationVault Agent TemplatesAppRole With Terraform & ChefJava Application DemoTransit Secrets Re-wrappingUsing HashiCorp Vault C# Client with .NET CoreUsing HashiCorp Vault Agent with .NET CoreBuild Your Own PluginsVault GitHub ActionsVault AWS Lambda Extension
Auth Methods
    TokensOIDC Auth MethodAppRole Pull AuthenticationAppRole With Terraform & ChefVault Agent with AWSVault Agent with KubernetesIdentity: Entities and GroupsBuild Your Own Plugins
Auto Unseal
    Auto-unseal using AWS KMSAuto-unseal using Azure Key VaultAuto-unseal using GCP Cloud KMSAuto-unseal using Transit Secrets EngineHSM Integration - Seal Wrap
Data Encryption
    Encryption as a Service: Transit Secrets EngineTransit Secrets Re-wrappingJava Application Demo
Day 1: Deploying Your First Vault Cluster with Consul
    Vault Reference ArchitectureProduction HardeningVault Deployment GuideVault High Availability with ConsulAuto-unseal using AWS KMSAuto-unseal using Azure Key VaultAuto-unseal using GCP Cloud KMSAuto-unseal using Transit Secrets EngineHSM Integration - Seal WrapDisaster Recovery Replication SetupPerformance Replication with Paths Filter
Day 1: Deploying Your First Vault Cluster with Integrated Storage
    Vault with Integrated Storage Reference ArchitectureProduction HardeningVault Deployment Guide with Integrated StorageAuto-unseal using AWS KMSAuto-unseal using Azure Key VaultAuto-unseal using GCP Cloud KMSAuto-unseal using Transit Secrets EngineHSM Integration - Seal WrapDisaster Recovery Replication SetupPerformance Replication with Paths Filter
Getting Started
    Introduction to VaultInstall VaultStarting the ServerYour First SecretSecrets EnginesDynamic SecretsBuilt-in HelpAuthenticationPoliciesDeploy VaultUsing the HTTP APIs with AuthenticationWeb UINext Steps
Getting Started with Vault UI
    Getting Started with Vault UIInstall VaultWeb UICreate Vault PoliciesManage Authentication MethodsManage Secrets EnginesAPI Explorer in Vault UINext Steps
HCP Vault
    Create a Vault Cluster on HashiCorp Cloud Platform (HCP)Multi-tenancy with NamespacesCommon Vault Setup TasksVault Operation Tasks
Integrated Storage
    Vault with Integrated Storage Reference ArchitectureVault Deployment Guide with Integrated StorageVault HA Cluster with Integrated StorageVault HA Cluster with Integrated Storage on AWSInspecting Data in Integrated StoragePreflight Checklist - Migrating to Integrated StorageStorage Migration tutorial - Consul to Integrated StorageUse Integrated Storage for HA Coordination
Interactive Labs
    Your First SecretDeploy VaultPoliciesRekeying & Rotating VaultGenerate Root Tokens Using Unseal KeysConfigure Vault as a Certificate Manager in Kubernetes with HelmIntegrate a Kubernetes Cluster with an External VaultVault Installation to Minikube via HelmVault Installation to Red Hat OpenShift via HelmMount Vault Secrets through Container Storage Interface (CSI) VolumeInjecting Secrets into Kubernetes Pods via Vault Helm SidecarTokensAppRole Pull AuthenticationOpenLDAP Secrets EngineVault PoliciesIdentity: Entities and GroupsACL Policy Path TemplatingVersioned Key/Value Secrets EngineCubbyhole Response WrappingDynamic Secrets: Database Secrets EngineUser Configurable Password Generation for Secret EnginesBuild Your Own Certificate Authority (CA)Encryption as a Service: Transit Secrets EngineTransit Secrets Re-wrappingAuto-unseal using Transit Secrets EngineSSH Secrets Engine: One-Time SSH PasswordTransform Secrets Engine[Tech Preview] Tokenize Data with Transform Secrets EngineDirect Application IntegrationVault Agent with AWSVault Agent CachingVault Agent TemplatesVault HA Cluster with Integrated StorageUse Integrated Storage for HA CoordinationMonitor Telemetry & Audit Device Log Data with SplunkProtecting Vault with Resource QuotasCodify Management of Vault EnterpriseCodify Management of Vault
Kubernetes
    Vault Installation to Minikube via HelmVault Installation to Red Hat OpenShift via HelmInjecting Secrets into Kubernetes Pods via Vault Helm SidecarIntegrate a Kubernetes Cluster with an External VaultVault Installation to Google Kubernetes Engine via HelmVault Installation to Azure Kubernetes Service via HelmMount Vault Secrets through Container Storage Interface (CSI) VolumeConfigure Vault as a Certificate Manager in Kubernetes with HelmVault Agent with KubernetesVault on Kubernetes Reference ArchitectureVault on Kubernetes Deployment GuideVault on Kubernetes Security ConsiderationsDeploy Consul and Vault on Kubernetes with Run TriggersAutomate Terraform Cloud Workflows
Monitoring & Troubleshooting
    Troubleshooting VaultMonitoring Vault ReplicationVault Usage MetricsMonitor Telemetry & Audit Device Log Data with SplunkVault Cluster MonitoringInspecting Data in Consul StorageInspecting Data in Integrated StorageBlocked Audit DevicesQuerying Audit Device Logs
Operations Fundamentals
    Configure VaultVault High Availability with ConsulProduction HardeningVault PoliciesIdentity: Entities and GroupsGenerate Root Tokens Using Unseal KeysRekeying & Rotating VaultProtecting Vault with Resource QuotasCodify Management of VaultCodify Management of Vault EnterpriseTroubleshooting VaultPerformance TuningVault Usage Metrics
Policies
    Vault PoliciesACL Policy Path TemplatingSentinel PoliciesSentinel HTTP ImportSentinel Validation PoliciesControl GroupsUser Configurable Password Generation for Secret Engines
Product Certification Exam Prep
    Vault Associate Certification Exam Review
Recommended Patterns
    Recommended Pattern for Vault UnsealRecommended Pattern for Stateless Vault for Transit Auto UnsealRecommended Pattern for Vault AppRole UseRecommended Pattern for Vault Centralized Secrets Management
Secrets Management
    Static Secrets: Key/Value Secrets EngineVersioned Key/Value Secrets EngineCubbyhole Response WrappingDynamic Secrets: Database Secrets EngineDatabase Root Credential RotationDatabase Static Roles and Credential RotationActive Directory Service Account Check-outOpenLDAP Secrets EngineAzure Secrets EngineBuild Your Own Certificate Authority (CA)SSH Secrets Engine: One-Time SSH PasswordUser Configurable Password Generation for Secret Engines[Tech Preview] Key Management Secrets EngineKMIP Secrets EngineBuild Your Own PluginsGenerate Nomad Tokens with HashiCorp VaultGenerate mTLS Certificates for Nomad using VaultVault Integration and Retrieving Dynamic SecretsInject secrets into Terraform using the Vault provider
Secure Consul with Vault Integrations
    Automatically Rotate Gossip Encryption Keys Secured in VaultGenerate mTLS Certificates for Consul with VaultAdminister Consul Access Control Tokens with VaultBuild Your Own Certificate Authority (CA)Secrets Engines
Use Cases for Terraform
    Use Terraform to Register External ServicesCodify Management of VaultCodify Management of Vault EnterpriseAppRole With Terraform & ChefDeploy Consul and Vault on Kubernetes with Run TriggersManage Kubernetes Resources via TerraformProvision Infrastructure with PackerAutomate monitoring with the Terraform Datadog providerUse Application Load Balancers for Blue-Green and Canary Deployments
Vault 1.6 Release Highlights
    [Tech Preview] Key Management Secrets EngineVault GitHub Actions[Tech Preview] Tokenize Data with Transform Secrets EngineTransform Secrets EngineVault Usage MetricsVault HA Cluster with Integrated StorageVault HA Cluster with Integrated Storage on AWSCodify Management of Vault EnterpriseDynamic Secrets: Database Secrets Engine
Vault Enterprise
    Sentinel PoliciesSentinel HTTP ImportControl GroupsTransform Secrets Engine[Tech Preview] Tokenize Data with Transform Secrets EngineKMIP Secrets Engine[Tech Preview] Key Management Secrets EngineDisaster Recovery Replication SetupPerformance Standby NodesSetting up Performance ReplicationPerformance Replication with Paths FilterMonitoring Vault ReplicationHSM Integration - Seal WrapHSM Integration - Entropy AugmentationSecure Multi-Tenancy with NamespacesProtecting Vault with Resource QuotasCodify Management of Vault Enterprise
HashiCorp
  • System Status
  • Terms of Use
  • Security
  • Privacy
stdin: is not a tty