Infisical is transitioning from Service Token and API Key authentication methods to identities for improved security and usability.
Identities in Infisical are entity representations for workloads or applications with enhanced security controls and permissions.
Users need to switch clients to use identities by July 22nd, 2024, as Service Token and API Key authentication methods will be deprecated after that date.
Identities offer role-based permission system, IP allowlist capabilities, and short-lived access token properties for improved security measures.
All client documentation, including CLI, Kubernetes Operator, etc., has been updated to utilize identities instead of Service Tokens and API Keys.

Infisical is an end-to-end, open-source platform focused on SecretOps, designed to securely manage an organization's secrets and configurations across teams and infrastructure. They offer features for automatically rotating database tokens and API keys, using templates, setting user permissions, and generating compliance audit reports. The company is a strong proponent of open source, especially for security software, aiming to provide the highest security standards. With 120+ contributors and a significant community presence, Infisical seems dedicated to community engagement and transparency. They provide secret management and scanning services, and pride themselves on ease of setup and maintenance.

Infisical

Secure open-source platform for managing team secrets and configurations.

Deprecating Service Tokens and API Keys in Favor of Identities

Recent Product News