Changelog

You can now manage your application secrets programmatically via a public REST API. The API is availalable on all pricing tiers for both Phase Cloud and Phase Self-hosted users, and allows you to create, fetch, update and delete secrets.

The Console now automatically detects boolean values and adds a toggle switch to easily flip between true and false states.

You can now securely share secrets with users outside of your team with Phase Console's Secret Sharing feature: Lockbox. Secrets shared with Lockbox are encrypted with zero-trust encryption, and can only be accessed and views using the link. You can set a custom expiry policy for the link based on either number of views or a fixed expiry time.

We've revamped the UX for unlocking the user keyring with your sudo password to be significantly less disruptive to your workflow. We've also added the option to skip entering your password entirely on trusted browsers and devices.

Secrets can now be managed within folders, and will keep track of the path that they are stored under. This makes it much easier to use Phase for monorepo projects or multi-tennant use-cases. All existing secrets are given the root / path by default.

The Phase Console now has native integration with Hashicorp Vault, allowing you to keep your existing Vault setup in-place while using Phase for development or staging environments. The integration works for self-hosted instances of Vault as well as Hashicorp Cloud Platform.

The Phase Console now has native integration with GitHub Actions, allowing you to use Phase to inject secrets into your Workflows. Phase will make sure your CI runs, build pipelines and test environments use up-to-date secrets without any manual intervention required.

The Phase Console now has native integration with AWS Secrets Manager, allowing you to use Phase as a single source of truth for all secrets in your AWS Stack.

Third party integrations are now live in the Phase Console. This allows native integrations with a host of third party providers to keep your secrets automatically in-sync.

You can now override the value of Secret with a Personal Secret. This lets you supply a one-off value for a given secret that is specific to your local development environment, without having to modify the secret for the rest of your team.

Running phase auth in the CLI now opens up a new tab in your default web browser and redirects you to the Phase Console for authentication. This is a seamless process that allows users to authenticate with their existing accounts without needing to manually generate, copy and paste personal access tokens.