HashiCorp Vault

1Password is a password, secrets, and access-management platform for securing human, machine, and AI-agent credentials. Its Credential Broker verifies agents and machine workloads at runtime, then provides only the credentials they are authorized to receive. The platform also supports enterprise password management, privileged access with just-in-time and just-enough access, and discovery and auditing of access to AI tools and SaaS applications.

1Password is a password manager and digital vault developed by AgileBits Inc. It stores and synchronizes passwords, secure notes, and credentials across devices and provides password generation, secure sharing, and access-management features for individuals, teams, and enterprises.

vals is a Helm-like configuration values loader and secrets-management tool developed in the helmfile project. It resolves references to values and secrets from backends such as Vault, AWS Secrets Manager, AWS SSM Parameter Store, Google Cloud Secret Manager, SOPS-encrypted files, Kubernetes, 1Password, Doppler, Bitwarden, Infisical, and others. Its CLI can evaluate JSON or YAML templates and replace `ref+<TYPE>` expressions with fetched values, render environment variables, or populate environment variables and execute a command. It supports installation on Linux, macOS, and Windows, and can be built from source with optional Go build tags to include selected providers.

jit is a local-first macOS command-line secrets manager from jitpass that moves development credentials from plaintext files such as .env, AWS credentials, shell exports, npm configuration, and MCP configurations into an encrypted vault protected by Touch ID. It rewrites source files with decoys so existing tools can continue working while the real value is released only to an authorized process. It provides credentials through per-process environment injection, native credential protocols such as AWS credential_process and Docker or Git credential helpers, and a named-pipe mount for tools that only read files. The named pipe is a mode-0600 POSIX FIFO: authorized reads receive decrypted values through the kernel pipe buffer without writing them to disk, while ambient readers receive decoys. jit is macOS-only for Apple Silicon and is still in development; the project states that it does not protect credentials after they enter the requesting process's memory.

Bitwarden is an open-source password manager for individuals, teams, and enterprises. It stores, shares, and manages passwords, passkeys, and other secrets, and can generate random secrets such as the one used in the video’s Euro Office configuration.