Store secrets in your Postman Vault

Use Postman Vault to securely work with sensitive data, such as API keys and passwords, as vault secrets in Postman. You can reference vault secrets in your HTTP request and collections. Store vault secrets in your Postman Local Vault, where your sensitive data is local and only accessible by you. You can also create Postman Vault integrations to connect vault secrets with external vaults, allowing you to reference managed secrets without storing them in Postman.

About Postman Vault

Postman Vault includes the following features:

• Postman Local Vault - Store sensitive data as vault secrets in your local instance of Postman. Only you can access vault secrets in your Postman Local Vault, and they aren’t synced to the Postman cloud.

• Postman Vault integrations - Create integrations between Postman Vault and external vaults. Link vault secrets in your Postman Local Vault to secrets stored in external vaults, which aren’t synced to the Postman cloud. Postman supports integrations with 1Password, AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault. Postman Vault integrations are available with Postman Enterprise plans with the Advanced Security Administration add-on.

Get started with Postman Vault

When you first open Postman Vault, Postman generates a vault key that’s required to open your Postman Local Vault when you sign in. To learn how to open your Postman Local Vault and get your vault key, see Access Postman Vault.

Once your Postman Local Vault is open, you can create, manage, and reference vault secrets in Postman. To learn more, see Create and manage vault secrets.

Feature availability

The following features require the Postman desktop app:

• Open Postman Vault from public workspaces - You must use the Postman desktop app to open your Postman Vault from a public workspace, and reference vault secrets in a public workspace. If you’re using the Postman web app, you must add new vault secrets to your Postman Vault if you’re opening it from a public workspace.

• Create and manage Postman Vault integrations (Enterprise teams only with the Advanced Security Administration add-on) - You must use the Postman desktop app to create and manage Postman Vault integrations. If you’re using the Postman web app, Postman Vault integrations aren’t available.

Troubleshoot vault secrets

To learn how to troubleshoot vault secrets in your Postman Local Vault, see Troubleshoot vault secrets.