Welcome to Passport
Passport from Postman is now available! Passport is a secure API access system that lets your team call authenticated APIs without distributing or exposing real secrets.
Passport is in beta.
Passport provides the following benefits:
-
Secure by design — Secrets are resolved inside your cloud and never leave it. Every request is cryptographically authenticated and every call is audited.
-
Granular, revocable access — Access is granted per API, not per team or environment. Passport Admins can approve or revoke access to a specific API at any time.
-
No code changes required — External clients like curl, scripts, and SDKs route through a local daemon transparently. Passport works with the tools your developers already use.
-
Compliance-friendly — Secrets never pass through an external network, making Passport suitable for teams in regulated industries where third-party secret exposure is a risk.
-
Bring your own secret store — Passport connects to HashiCorp Vault, AWS Secrets Manager, and Google Cloud Secret Manager.