# HashiCorp Vault

26 Hacker News commenters recommended HashiCorp Vault and 10 criticized it, November 2025 to November 2026. It was recommended in 10 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** Recommended for fine-grained secret access, audit logs and a long track record. Common caveat: it needs setup, maintenance and separate infrastructure.

## Why people recommend it

- Fine-grained access and audit logs (2 comments): "All these have native audit logs and access logs, which can help you pin point exactly when did your AI Agent requested and accessed your secrets at Runtime." ([source](https://news.ycombinator.com/item?id=47749936)) "Hashicorp Vault solves these problems by giving you fine-grained access to keys and expiry of each token" ([source](https://news.ycombinator.com/item?id=46950251))
- Trusted security design (3 comments): "it's been around for years. I think we can safely say they know what they are doing." ([source](https://news.ycombinator.com/item?id=46926516)) "by people whose understanding of security is far poorer than HashiCorp's" ([source](https://news.ycombinator.com/item?id=47355168)) "about the safest mechanism possible for this sort of secrets management" ([source](https://news.ycombinator.com/item?id=47847132))
- Little maintenance once running (2 comments): "it worked beautifully for years with little to no maintenance" ([source](https://news.ycombinator.com/item?id=48545103)) "consul and vault are pretty brainless to operate." ([source](https://news.ycombinator.com/item?id=48561779))
- Fits on-prem and high-assurance needs (2 comments): "it's used a lot in high assurance environments given it is easily integrated with Thales HSMs and has FIPS compliance" ([source](https://news.ycombinator.com/item?id=48854885)) "on prem, there are limited options and Vault fits the bill" ([source](https://news.ycombinator.com/item?id=48859143))

## What people warn about

- Needs separate infrastructure and maintenance (3 comments): "they require to be placed on a separate server, and come with their own infra management" ([source](https://news.ycombinator.com/item?id=47716117)) "Too many broken upgrades and manual click-ops tasks just to keep them online." ([source](https://news.ycombinator.com/item?id=48550320)) "are excellent but require setup, maintenance, and infra" ([source](https://news.ycombinator.com/item?id=47149772))
- Licence change worries users (2 comments): "I was really not happy with Hashi's licensing change" ([source](https://news.ycombinator.com/item?id=47408002)) "is still limited by their license" ([source](https://news.ycombinator.com/item?id=50302566))

## Alternatives hackers recommend

- [OneCLI](https://hackerapproved.com/p/onecli.md): 39 recommend
- [SOPS](https://hackerapproved.com/p/sops.md): 28 recommend
- [Agent Vault](https://hackerapproved.com/p/agent-vault.md): 20 recommend
- [Kloak](https://hackerapproved.com/p/kloak.md): 13 recommend
- [AWS Secrets Manager](https://hackerapproved.com/p/aws-secrets-manager.md): 8 recommend

## Cite as

Hacker Approved, "HashiCorp Vault", https://hackerapproved.com/p/hashicorp-vault/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).