credstash

Using Credstash is an alternative way to secrets.yaml. They can be managed from the command line via the credstash script.

Before using credstash, you need to set up AWS credentials either via the aws command line tool or using environment variables as explained in the AWS CLI docs as well as creating a KMS key named credstash as explained in the credstash Readme. After that is complete, you can use the provided script to add secrets to your Home Assistant secret store in credstash.

$ hass --script credstash --help

To store a password in credstash, replace your password or API key with !secret and an identifier in configuration.yaml file.

http:
  api_password: !secret http_password

Create an entry in your credstash store.

$ hass --script credstash set http_password