Lockr

Lockr is an off-site secrets management service for Drupal allowing you to store API and Encryption keys using the Key module effortlessly. Setup takes minutes and your secrets are stored to industry best practices.

Lockr securely stores secrets by encrypting the value and leaving behind the wrapping key in place of the secret. Your encrypted secret is then securely sent to our servers and stored in a FIPS-140-2 compliant key manager. This wrapping process keeps Lockr from ever knowing or being able to disclose your keys, they are locked away and only you can access them.

Lockr separates your production values from development, allowing you to set secrets in development and production and migrate your site between without having to reset the values each time. This keeps production data secure in development as only the production values are given to production environments. It also protects your developers from testing new services and features using your production accounts.

Note for Drupal 8/9

Lockr for Drupal 8 and 9 depends on a connection library installed via Composer. If this module itself is not installed via Composer (i.e. composer require 'drupal/lockr'), the dependency must be installed manually with composer require 'lockr/lockr:^1.0.0'.