SHSelfHostIndex
KE

Keywhiz

Secret management and distribution system

Identity & SSO Archived ★ 2.6k stars Hard setup Apache-2.0

This project is archived. Upstream development has stopped, so expect no new features or security fixes. Consider an actively maintained identity & sso alternative.

Keywhiz is a secret management and distribution system built by Square for securely storing and serving sensitive infrastructure secrets to services. It is fully self-hosted and uses mutual TLS for access.

Official siteSource code

Key features

  • Secret storage and distribution
  • Mutual TLS access
  • Automatic rotation
  • Self-hostable

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Active community (2.6k GitHub stars)
  • Written in Java

Is Keywhiz secure?

OSV.dev has no published security advisories for Keywhiz's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

Source: OSV.dev, checked 2026-10-14. How this is measured.

Keywhiz replaces

Self-hosted HashiCorp Vault alternatives

Health badge

Maintain Keywhiz? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 15 · archived

Markdown
[![SelfHostIndex health score for Keywhiz](https://selfhostindex.com/badge/keywhiz.svg)](https://selfhostindex.com/app/keywhiz/)
HTML
<a href="https://selfhostindex.com/app/keywhiz/"><img src="https://selfhostindex.com/badge/keywhiz.svg" alt="SelfHostIndex health score for Keywhiz"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/keywhiz.svg
   :alt: SelfHostIndex health score for Keywhiz
   :target: https://selfhostindex.com/app/keywhiz/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar identity & sso apps