OpenBao Hosting Live In 5 Minutes

Deploy OpenBao hosting and keep application secrets, encryption keys and certificates on a server you control. xCloud runs the pinned OpenBao 2.6.2 image in production server mode with integrated Raft storage, mounts the openbao_data volume and publishes the web interface and API over HTTPS. OpenBao starts uninitialized, so you choose the key shares and threshold, and you alone hold the unseal keys and root token.

Deploy your OpenBao

No terminal
No technical skills needed
No lock-in, cancel anytime

What is OpenBao?

OpenBao is a secrets manager: upstream describes an identity-based system that stores and distributes secrets, certificates and keys behind authentication, path-based policies and audit logs. It offers encrypted key/value storage, dynamic secrets generated on demand, data encryption, leasing with renewal, and revocation. Run as self-hosted OpenBao, it is the alternative to a hosted secrets manager that keeps both the data and the unseal keys with you, under the MPL-2.0 licence.

On xCloud it is OpenBao 2.6.2 pinned by digest, in production server mode with integrated Raft storage on the openbao_data volume. Only the web interface and API on port 8200 are published over HTTPS; the cluster port stays internal. The vault starts uninitialized and sealed, you run the initialization yourself, and xCloud never sees the keys or the root token.

From Sign-Up to a Live, Unsealed OpenBao In Just 3 Easy Steps

Self-hosting a production secrets manager normally means a container, Raft storage, a domain and a certificate before you can even initialize it. This is the same result without assembling any of it — initialization and unsealing stay entirely in your hands.

Step 01
Sign Up
Create your xCloud account and pick OpenBao from the OneClick catalog. Choose your domain and target server — there are no extra fields to fill in.
Step 02
We Deploy It For You
One click. We bring up the official OpenBao 2.6.2 image — pinned by immutable digest — in production server mode with integrated Raft storage, mount the openbao_data volume, and publish the web interface and API over HTTPS on your domain. OpenBao itself starts uninitialized.
Step 03
Initialize, Unseal And Store Your Keys
Open your HTTPS URL, choose your key shares and threshold, and initialize the Raft cluster exactly once. Immediately store every unseal key and the initial root token in separate secure locations — this output is shown only once and xCloud never sees it. Unseal, sign in, then create a synthetic secret to confirm the deployment.

Everything OpenBao Does, On Your Own Server

OpenBao runs in full production mode here — Raft storage, secrets, keys and certificates, on infrastructure you control.

Centralized Secrets Management
Store application secrets, encryption keys, certificates, policies and authentication methods in one open-source platform instead of scattered config files.
Production Server Mode
OpenBao runs as a real server with integrated Raft storage — never development mode, which discards data on restart.
Customer-Controlled Unseal Ceremony
You choose the key shares and threshold, initialize the cluster and hold every unseal key and root token yourself.
Encryption Keys And Certificates
Issue and manage encryption keys and certificates alongside your secrets, from the same OpenBao installation.
Persistent Raft Storage
Secrets, keys and cluster state persist on the openbao_data volume across normal restarts and container recreation.
Private Cluster Port
Only the web interface and API (port 8200) are proxied over HTTPS — the Raft cluster port stays internal, never exposed to the internet.

Everything You Need To Run Your Secrets Manager 24/7

Managed hosting for OpenBao, so the parts that keep it online are not your problem.

OpenBao 2.6.2 deployed instantly
Official pinned image digest
You control initialization and unseal keys
Cluster port never exposed to the internet
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With OpenBao

Stop leaving credentials in config files
Move database passwords and API keys out of source code and plain-text files into one place where each client is authenticated and authorized by policy.
Hand out short-lived credentials
Let applications request dynamic secrets, such as generated database or cloud credentials, that are revoked automatically when their lease ends.
Encrypt data without building crypto
Give developers an API that encrypts and decrypts values so they can store ciphertext in their own database using parameters your security team defines.
Keep key custody with your own team
Choose the key shares and threshold yourself and split the unseal keys among trusted people, so no single person and no hosting vendor can open the vault alone.

OpenBao vs Alternatives

Hosted secrets managers: A hosted secrets manager keeps your secrets and keys on a vendor's infrastructure. OpenBao is open source under MPL-2.0 and runs on your own server, where you choose the unseal threshold and hold the keys.
Infisical: Infisical is another self-hosted secrets option with its own OneClick page. OpenBao's upstream focus is identity-based access through path-based policies, dynamic secrets with leases and revocation, and data encryption.
Vaultwarden: Vaultwarden has its own OneClick page and is aimed at storing people's passwords in a vault. OpenBao serves machines and applications, issuing secrets and keys to clients that authenticate against policies.
Secrets in environment and config files: Upstream describes credentials sprawled across plain text, source code and config files as the problem it solves, by centralizing them behind authentication, authorization and an audit trail.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for OpenBao hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More headroom for audit devices and lease volume.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Cloud VPS 24 GB

OpenBao alongside a whole self-hosted stack.

$84.99per month

24 GB RAM
8 vCPU cores
300 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. OpenBao itself is free under the MPL-2.0 licence.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy OpenBao on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Secrets Manager?

OpenBao on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own the server. Stay in control of your keys.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Can you self-host OpenBao with Docker?

Yes. This template is OpenBao Docker hosting without the assembly: the official 2.6.2 image pinned by digest, a one-shot container that fixes ownership of openbao_data, the server in production mode with Raft storage, and HTTPS on your domain. It is your own OpenBao cloud on a dedicated server.

How much RAM does OpenBao need?

The manifest sets a floor of 1024 MB RAM, one CPU core and 10 GB disk for a small single node, and the 6 GB plan is the entry rung. Beyond that, capacity depends on how many secrets you hold, audit devices, leases and encryption workload.

Is OpenBao free?

Yes, OpenBao is open source under the Mozilla Public License 2.0, with no licence fee. What xCloud bills is the dedicated Cloud VPS underneath it, cancellable whenever you wish. Initialization, key custody and policy design stay with you.

Does xCloud initialize or unseal OpenBao for me?

No. OpenBao starts uninitialized. You open your HTTPS address, choose the key shares and threshold, and initialize it once. The unseal keys and initial root token appear only then; xCloud does not copy, log or retain them, and cannot recover them if you lose them.

Why is OpenBao sealed after a restart?

Without an external auto-unseal provider, which this template does not configure, OpenBao returns to a sealed state after every restart. That is expected upstream behaviour. Open the web interface, enter your threshold of unseal keys, then sign in and check your data.

Where should I store my unseal keys and root token?

In separate, approved secure systems outside xCloud, never in environment variables, Compose files, scripts, logs, screenshots or support messages. Losing them with no working rekey plan can leave the Raft storage permanently inaccessible, so spread the shares among trusted people.

How do I rotate my unseal or recovery keys?

Unseal and authenticate first, then use OpenBao's own supported rekey workflow. Never try to replace recovery material in the Environment editor; that is not how OpenBao rekeying works, and an edit there will not change the keys protecting your data.

How do I back up OpenBao?

Back up the whole openbao_data volume, which holds the Raft storage, together with your unseal and recovery material kept through a separate secure process. OpenBao's own Raft snapshot commands are the application-consistent route. Test a restore in an isolated environment first.

Backups in xCloud

How do I upgrade OpenBao?

The install stays on pinned 2.6.2 until you adopt a newer template version. Read the OpenBao release notes, take and verify a Raft snapshot, then redeploy and confirm unseal, sign-in and a sample secret before you discard the rollback point. Existing sites are never upgraded automatically.

Is OpenBao an alternative to Infisical?

Both store and serve secrets on a server you control. OpenBao centres on path-based policies, dynamic secrets with leases and revocation, and data encryption, as its upstream docs describe; compare Infisical on its own page. Both have OneClick pages here, so you can run either on a separate server.

Infisical hosting

What survives a restart?

Everything on the openbao_data volume: Raft storage, secrets, keys and policies are untouched by a restart. What does not survive is the unsealed state, so you re-enter your unseal keys each time the server or container restarts.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.