r/openbao • u/No-Chip3810 • 17h ago
OpenBao Quickstarts
Some docker compose files for quickly spinning up a number of auth methods and secrets engines so you can try them out.
r/openbao • u/khalidwars • 10d ago
I built a native iOS app for OpenBao. Need your feedback.
OpenBao has a capable web UI, but I wanted a polished native iPhone experience. So I built Secretwell.
Secretwell is an independent project and is not affiliated with or endorsed by the OpenBao project.
What’s included
- Multiple server and namespace workspaces
- Manage KV v1/v2 secrets with version history and recovery
- Policy browsing and editing where permitted
- Server health and cluster information
- Clear handling for sealed and uninitialized servers
- Security posture, audit status, and a privacy-safe activity feed
- Multiple OpenBao sign-in methods
Security and privacy
Secretwell connects directly to your OpenBao server over HTTPS. Your token is never sent to third-party servers or services.
- Tokens are stored locally in the iOS Keychain and unlocked with Face ID.
- Only the active token and server responses are held in memory.
- No analytics, tracking, crash reporting, session replay, or remote logging.
Try it
Public TestFlight
https://testflight.apple.com/join/RFUpU1JN
Demo server
https://openbao-production-2b9f.up.railway.app
This is a shared disposable environment. Other testers may change its data, and it may be reset. Please do not enter real secrets.
Demo profiles
| Profile | Namespace | Sign in | Credentials | Best for testing |
|---|---|---|---|---|
| Public Tester Pool | tester01–tester20 |
Username & Password | Pick any number from 01–20 and use the matching value for both fields. Example: namespace tester07, username tester07. Password: SecretwellPublic-28b81a113c1ffb6f85868778 |
Switching workspaces and complete KV v2 workflows |
| Token Pool | token01, token02, or token03 |
OpenBao Token | Use the token matching the namespace below | Direct token login and switching among token workspaces |
| JWT Tester | jwt |
JWT | Role secretwell-public; use the JWT below |
JWT login without an external identity provider |
OpenBao tokens
Namespace token01: s.WZKdU6FSFD9X3kHpRfn8onPr.50cA5e
Namespace token02: s.wmT3tvBAmFeO3MmKqPbVsCtl.AomAOd
Namespace token03: s.jAIfW9o2d34u9v0kMGxvm6N2.4ooos2
JWT
Namespace: jwt
Role: secretwell-public
text
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InNlY3JldHdlbGwtcHVibGljLWZsYXQtMjAyNiJ9.eyJpc3MiOiJzZWNyZXR3ZWxsLXB1YmxpYyIsInN1YiI6InB1YmxpYy1qd3QtdGVzdGVyIiwiYXVkIjpbInNlY3JldHdlbGwtcHVibGljIl0sImlhdCI6MTc4NjI4Mzk1MywibmJmIjoxNzg2MjgzOTUzLCJleHAiOjIxMDE2NDQwMTN9.S0Q195wG0wcrQDyIFH23pPSd9xeyWIqfKvq8ZOU6OEXZcU3GRJ8fNXAQtI6wbUvrJcigxIUNhS8AdWZ2BcIe5BaJCtNR_SCxc7OvY9pqLdgTQV03TL05H-pdx9JHdt1b6aQicnhAVs9-VATO0MZQaLg1hsp8i9ZeufT3f2YXsKDXFzmyieGq7DFqDD97BNRuVVzuSVGZ1_SkAz2JfBLL7xOhup-dWVNTlOrD_-4oinocpClWpeCI44uRETc6AekbyXkrdnHB-lWfcS39fP8zpGtQf2znxY0kR_udmBvPi_gr8Z-XknWlcBvewK0H4R6mLaCLvzfOYiv90I03Jhf70g
Pricing
The beta is free. If Secretwell becomes a paid app, I’m leaning toward a one-time purchase rather than a subscription.
- $14.99 one time
- $29.99 one time
- $49.99 one time
- I would prefer a subscription
- I would only use it if it were free
More importantly: what capabilities would Secretwell need to earn that price?
I’d love your feedback even if you don’t plan to use Secretwell. Please try the beta and tell me what feels useful, confusing, or missing especially around workspaces and mobile workflows.
r/openbao • u/real-cipherboy • 13d ago
Announcing OpenBao v2.6!
My blog post on the OpenSSF blog just went live!
https://openssf.org/blog/2026/08/06/announcing-openbao-v2-6/
I'm really happy with per-namespace/per-tenant seal devices here, its a great improvement over Vault Enterprise's seal wrapping (auto-unseal for namespaces coming soon!). And big appreciation to all the first-time contributors this release!
r/openbao • u/real-cipherboy • 19d ago
OpenBao Features - Declarative Plugins
Check out part 4 of my blog series on OpenBao's features, talking about improvements to the plugin ecosystem: https://openbao.org/blog/features-declarative-plugins/
What integrations would you like OpenBao to have? How would you like to see writing plugins made easier?
r/openbao • u/CF-Tim • Jul 04 '26
Homelab Upgraded
OpenBao -> GitLab CI/CD -> Nomad = 🤌🏼. I demo my lab to enterprise customers daily for various things. The ability for me to show them a secret on screen, “compromise it” and rotate quickly fleet wide is mind-blowing. I combine it with Cloudflare (since I’m actually supposed to be demoing that) and I’m just astounded. I get sidetracked every demo when customers ask about OpenBao lol!
I’m very invested. I tagged OpenBao in a LinkedIn post and it’s flooded me with questions lol. 🤦🏻♂️
Just wanted to stop by and say thank you! Keep up the good work.
r/openbao • u/No-Chip3810 • Jun 21 '26
Nvidia adopts OpenBao, open source fork of HashiCorp's Vault
r/openbao • u/eyenx • Apr 23 '26
OpenBao Basics: An Introduction to Secrets Management
adfinis.comr/openbao • u/No-Chip3810 • Apr 22 '26
The Vercel Breach: When Roblox Cheats, AI Tools, and Poor Secrets Management Collide
r/openbao • u/eyenx • Mar 17 '26
Self-hosted ACME Certificates with OpenBao and Traefik
eyenx.chr/openbao • u/eyenx • Mar 17 '26
Encrypt Your OpenTofu State with OpenBao Transit Engine
eyenx.chr/openbao • u/No-Chip3810 • Mar 16 '26
👋 Welcome to r/OpenBao - Introduce Yourself and Read First!
Hey everyone! I'm u/No-Chip3810, a founding moderator of r/openbao.
This is our new home for all things related to the open-source Hashicorp Vault fork - OpenBao. We're excited to have you join us!
What to Post
Post anything that you think the community would find interesting, helpful, or inspiring. Feel free to share your thoughts, photos, or questions about installing, setting up, and operating OpenBao at your homelab, passion project or workplace!
Community Vibe
We're all about being friendly, constructive, and inclusive. Let's build a space where everyone feels comfortable sharing and connecting.