--- title: "Phase Blog — Secrets Management, Security & Engineering" description: "Engineering guides, security best practices, and company updates from the Phase team. Learn how to manage API keys, environment variables, and application secrets." url: https://phase.dev/blog/ --- Blog # Guides, engineering tales & company updates Engineering guides, security deep dives, and company updates from the Phase team. Index11 articles [![SOC 2 Type 2 Compliant](https://phase.dev/assets/images/blog/soc2-compliant/cover.webp) ## SOC 2 Type 2 Compliant We are officially SOC 2 Type 2 compliant — here's what that means for you and your data. Nimish 2026.02.28](https://phase.dev/blog/soc2-type2-compliant/) [![2026 Pricing Updates](https://phase.dev/assets/images/changelog/pricing-updates/cover.webp) ## 2026 Pricing Updates We've simplified our pricing. Service Accounts are now free and only team members are billed. Nimish Rohan 2026.02.01](https://phase.dev/blog/2026-pricing-updates/) [![Speedrunning SOC 2 Type 2](https://phase.dev/assets/images/blog/soc2/mathias-reding.webp) ## Speedrunning SOC 2 Type 2 A guide for any early-stage technical founders to get SOC 2 Type 2 compliance as quickly as possible on a budget. Nimish 2025.11.21](https://phase.dev/blog/speedrun-soc2/) [![Announcing our pre-seed round](https://phase.dev/assets/images/blog/pre-seed/cover.webp) ## Announcing our pre-seed round We are happy to announce we have raised a pre-seed round from Balaji Srinivasan. Rohan Nimish 2025.07.28](https://phase.dev/blog/announcing-pre-seed/) [![Instrumenting Next.js with runtime secret injection](https://phase.dev/assets/images/blog/instrumenting-nextjs-runtime-secret-injection/building-pipes.webp) ## Instrumenting Next.js with runtime secret injection Leveraging the instrumentation feature in Next.js 14 to inject secrets into applications at runtime. Rohan 2025.07.27](https://phase.dev/blog/instrumenting-nextjs-with-runtime-secret-injection/) [![AES & ChaCha — A Case for Simplicity in Cryptography](https://phase.dev/assets/images/blog/chacha-vs-aes/blocks.jpg) ## AES & ChaCha — A Case for Simplicity in Cryptography A technical deep dive into how the ChaCha20 cipher is taking on AES as the gold standard for symmetric encryption, and a lesson about the power of simplicity in cryptographic design. Rohan 2025.04.14](https://phase.dev/blog/chacha-and-aes-simplicity-in-cryptography/) [![Managing Secrets in Docker Compose — A Developer's Guide](https://phase.dev/assets/images/blog/docker-compose-secrets/cover.webp) ## Managing Secrets in Docker Compose — A Developer's Guide A practical guide to securely managing secrets in Docker Compose for production deployments Nimish 2025.01.08](https://phase.dev/blog/docker-compose-secrets/) [![What is Secrets Management?](https://phase.dev/assets/images/blog/what-is-secret-management/keys.webp) ## What is Secrets Management? A better understanding of secrets management protects you from security breaches, saves developer time and streamlines deployments. Rohan Iroro 2024.07.05](https://phase.dev/blog/what-is-secrets-management/) [![End to End encrypted secrets deployment to Kubernetes](https://phase.dev/assets/images/blog/kubernetes/output.webp) ## End to End encrypted secrets deployment to Kubernetes Securely deploying secrets to Kubernetes with Phase Nimish 2024.03.26](https://phase.dev/blog/e2ee-secrets-deployment-with-kubernetes/) [![Updating public Next.js environment variables without rebuilds](https://phase.dev/assets/images/blog/nextjs-runtime-vars/control-panel.webp) ## Updating public Next.js environment variables without rebuilds A practical approach to updating public environment variables without rebuilding your Next.js app Rohan 2024.01.22](https://phase.dev/blog/nextjs-public-runtime-variables/) [![Unlocking encryption for developers](https://phase.dev/assets/images/blog/starting-phase/enigma-breaker.webp) ## Unlocking encryption for developers How years of trying to build secure, encrypted apps led us to build an open-source key management platform instead. Rohan 2023.07.06](https://phase.dev/blog/starting-phase/) DeploymentSelf-hosted / Cloud Get started ## Keep your secrets Self-host or start on fully managed Cloud in under a minute. Self-hosted Run Phase on your own infrastructure. Free and open source. AI agent deployment skill [![Docker Compose logo](https://phase.dev/assets/images/docker.svg)](https://docs.phase.dev/self-hosting/docker-compose)[![Kubernetes logo](https://phase.dev/assets/images/kubernetes.svg)](https://docs.phase.dev/self-hosting/kubernetes)[![AWS logo](https://phase.dev/assets/images/aws.svg)](https://docs.phase.dev/self-hosting/aws-eks)[![GCP logo](https://phase.dev/assets/images/gcp.svg)](https://docs.phase.dev/self-hosting/gcp)[![Azure logo](https://phase.dev/assets/images/azure.svg)](https://docs.phase.dev/self-hosting/azure)[![Railway logo](https://phase.dev/assets/images/railway.svg)](https://docs.phase.dev/self-hosting/railway)[![Raspberry Pi logo](https://phase.dev/assets/images/raspberry.svg)](https://docs.phase.dev/self-hosting/raspberrypi) [Self-hosting guide](https://docs.phase.dev/self-hosting) Cloud Fully managed. From signup to your first secret in 60 seconds. Sign up with [Google](https://console.phase.dev/login?provider=google)[GitHub](https://console.phase.dev/login?provider=github)[GitLab](https://console.phase.dev/login?provider=gitlab)