OWASP Secrets Management Cheat Sheet

1. Centralize and Standardize

   Single secrets manager and consistent access patterns.

2. Access Control

   Least-privilege access to secrets.

3. Automate Secrets Management

   Automated provisioning and rotation.

4. Secret Lifecycle

   Creation, rotation, revocation and expiry.

5. CI/CD Secrets

   Hardening pipelines and where secrets should live.

6. Rotation vs Dynamic Creation

   Short-lived dynamic credentials versus rotated static ones.

7. Cloud Providers

   Cloud secret services, envelope encryption and IAM.

8. Containers and Orchestrators

   Injecting secrets into containers and sidecars.

9. Encryption

   Encryption types, key storage and encryption as a service.

10. Detection

    Secret scanning approaches and lifecycle.

11. Incident Response

    Remediation and logging after secret exposure.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

• OWASP Logging Cheat Sheets
• OWASP MASVS
• OWASP Node.js Security Cheat Sheets
• OWASP Password Storage Cheat Sheet
• OWASP REST Security Cheat Sheet
• OWASP SAMM
• OWASP Session Management Cheat Sheet
• OWASP SSRF Prevention Cheat Sheet
• OWASP Top 10 (2021)
• OWASP Top 10 (2025)
• OWASP Top 10 CI/CD Security Risks
• OWASP Top 10 for LLM Applications