Dbrij Secrets

Keep your app keys and environment variables encrypted in your browser, with a key for each environment, every change kept, and roles for who can read or write. Dbrij stores them and cannot read them.

Can Dbrij read my secrets?

No. Each value is encrypted in your browser with a key for its environment, and that key reaches Dbrij only wrapped to the people you gave access and to your recovery kit. Dbrij stores what it cannot open. The one exception is your choice: an admin can let Dbrij open an environment to deploy, rotate or sync it, and every time it does, the reason is recorded. The names of your secrets are kept in plain text so lists, history and the record work, so never put a secret in a name.

What if I lose my passphrase?

Another key holder in the project can pass you the keys again, or anyone holding the recovery kit can open the project. Dbrij cannot, because it never had the keys. That is why every project asks you to save a recovery kit before it is made.

Who can see what?

In a company project each person gets a role in each environment: read, read and change, write without reading, or a role you name yourself, with an end date if you like. Admins manage people and keys, and changes to a protected environment wait for the approvers you choose. Every read and change is recorded, with names and never values.

What happens when someone leaves?

Remove them and their keys go at once. You see every secret they could read, so you can replace the ones that matter, and you can give each environment a new key so a copy of the old one opens nothing saved after it.

What does it cost?

Free holds three people and three projects, with every safety feature. Team and Business are billed for each person in your projects, monthly or yearly, and servers, pipelines and every other machine are free on every plan. A plan limit only stops something new: reading values and deploys never stop.

How do my apps get them?

Give each server or pipeline its own machine token, and start your app with dbrij secrets run, or load them from your code with the Node or Python library. The values open on your machine: Dbrij never sees the half of the token that opens them. A CI job can log in with its pipeline’s own identity instead of storing a token. On Dbrij Hosting, link a service and it gets them at every deploy, redeployed when they change and rolled back if a change breaks it. Elsewhere, a sync keeps a folder in step with your CI, hosting platform or cloud secret store, and tells you when someone changes it there.

Dbrij is Nigeria’s company operating system: the first Nigerian built platform to put team chat, video meetings, email, HR, tax compliant payroll, customer support, marketing, analytics and cloud hosting in one product on one subscription.

Everything on Dbrij

More from Dbrij