Skip to main content

HashiCorp Vault Unseal Key

Description#

General#

  • Documentation: https://www.vaultproject.io/docs/concepts/seal

  • Summary: HashiCorp Vault is a solution to securely store and manage access to secrets and systems based on trusted sources of application and user identity. This detector can detect unseal keys used to get access to the vault master key.

  • IPs allowlist: This feature is not available.

  • Scopes: Unsealing a vault requires entering a minimum number of different unseal keys. This number is defined when configuring the vault.

Revoke the secret#

The process is documented in the Rekeying & Rotating Vault documentation.

Check for suspicious activity#

This feature is not available.

Details for Hashicorp vault unseal key#

  • Family: Other

  • Category: Secret management

  • Company: HashiCorp

  • High recall: False

  • Validity check available: False

  • Minimum number of matches: 1

  • Occurrences found for one million commits: 0.35

  • Prefixed: False

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - unseal[_ .-]?key

Examples#

- text: |    VAULT_UNSEAL_KEY_3="C3fk5Q0ANMFlbjQk4E0MKD8xRdNW0YbLA/0pfMSWEouI"  apikey: C3fk5Q0ANMFlbjQk4E0MKD8xRdNW0YbLA/0pfMSWEouI
- text: |    UNSEAL_KEY: BoK4FvGkefnzweuiciDcfrxYco43/45HgtrhtMSWZzOG  apikey: BoK4FvGkefnzweuiciDcfrxYco43/45HgtrhtMSWZzOG
- text: |    UNSEAL KEY: BoK4FvGkefnzweuiciDcfrxYco43/45HgtrhtMSWZzOG  apikey: BoK4FvGkefnzweuiciDcfrxYco43/45HgtrhtMSWZzOG