Fresh

Security

Back

Manuals

• Get started
• Guides
• Reference

Security for developers

Copy as Markdown

Open MarkdownAsk Docs AIClaudeOpen in Claude

Table of contents

---

Docker helps you protect your local environments, infrastructure, and networks with its developer-level security features.

Use tools like two-factor authentication (2FA), personal access tokens, and Docker Scout to manage access and detect vulnerabilities early in your workflow. You can also integrate secrets securely into your development stack using Docker Compose, or enhance your software supply security with Docker Hardened Images.

Explore the following sections to learn more.

For developers

Set up two-factor authentication\ \ Add an extra layer of authentication to your Docker account.

Manage access tokens\ \ Create personal access tokens as an alternative to your password.

Static vulnerability scanning\ \ Automatically run a point-in-time scan on your Docker images for vulnerabilities.

Docker Engine security\ \ Understand how to keep Docker Engine secure.

Secrets in Docker Compose\ \ Learn how to use secrets in Docker Compose.

More resources

Security FAQs\ \ Explore common security FAQs.

Security best practices\ \ Understand the steps you can take to improve the security of your container.

Suppress CVEs with VEX\ \ Learn how to suppress non-applicable or fixed vulnerabilities found in your images.

Docker Hardened Images\ \ Learn how to use Docker Hardened Images to enhance your software supply security.