Yandex Lockbox overview
Written by
Updated at March 7, 2025
Yandex Lockbox is a service for the centralized storage of secrets, such as passwords, SSH keys, and tokens. A secret is a set of versions that store your data. A version contains one or more key-value pairs. A key is a non-secret ID that identifies a value. The value is your secret data.
Yandex Lockbox allows users to manage a secret's lifecycle by creating, updating, and deleting secrets in a centralized manner and take advantage of all the access control features that Yandex Identity and Access Management provides.
All secrets are stored in encrypted form. By default, secrets are encrypted with a system key but you can also use Yandex Key Management Service with your own keys.
Interfaces for using the service
To work with Yandex Lockbox, you can use:
- Management console.
- Command line interface (CLI).
- API: REST or gRPC.
- SDK: in Java, Go, Python, or Node.js.