Using Credstash is an alternative way to
secrets.yaml. They can be managed from the command line via the credstash script.
Before using credstash, you need to set up AWS credentials either via the
aws command line tool or using environment variables as explained in the AWS CLI documentation as well as creating a KMS key named
credstash as explained in the credstash Readme. After that is complete, you can use the provided script to add secrets to your Home Assistant secret store in credstash.
$ hass --script credstash --help
To store a password in credstash, replace your password or API key with
!secret and an identifier in
example: password: !secret example_password
Create an entry in your credstash store.
$ hass --script credstash put http_password 123
List your secrets.
$ hass --script credstash list