Skip to main content

Organizational Secrets

The Organizational Secrets tab allows you to securely store and manage sensitive information such as API keys, tokens, and credentials at the organization level.

These secrets can be reused across workloads without exposing sensitive data in your code.

Accessing Organizational Secrets​

  1. Navigate to Overview → Organizations
  2. Select your organization
Navigate to Organization

Secrets Overview​

Click on the Secrets tab to see a centralized view of all organizational secrets.

Secrets List

What You'll See​

ColumnDescription
NameThe unique identifier for the secret
Last UpdatedWhen the secret value was last changed
Created ByThe user who created the secret
ActionsOptions to update or delete

Secret values are hidden by default. They are encrypted at rest and never exposed in logs or UI.

Create a New Secret​

Create Secret Modal

Steps to Create a Secret​

  1. Click Create Secret
  2. Enter a Name — must be unique within the organization
  3. Enter the Secret Value
  4. Click Create

Naming Best Practices​

Use uppercase, underscore-separated names that describe the purpose:

Good ✅Bad ❌
DB_PASSWORD_PRODpassword
STRIPE_API_KEYkey1
SLACK_WEBHOOK_URLsecret123

Managing Secrets​

From the Actions menu you can:

  • Update — Change the secret value without changing its name
  • Delete — Permanently remove the secret
warning

Deleted secrets cannot be recovered. Any workload referencing a deleted secret will fail at deploy time.

Using Secrets in Workloads​

Organizational secrets are injected as environment variables at deploy time. Reference them by name in your application configuration:

$DB_PASSWORD_PROD
$STRIPE_API_KEY
$SLACK_WEBHOOK_URL

They are available to all applications within the organization, making them ideal for shared credentials across multiple workloads.

Environment-Specific Secrets​

For multi-environment setups, use naming conventions to separate dev, staging, and production values:

API_KEY_DEV
API_KEY_STAGING
API_KEY_PROD

Search Secrets​

Use the search bar to find secrets by name quickly.

Security Considerations​

  • 🔐 All secrets are encrypted at rest
  • 🔐 Values are never shown in logs
  • 🔐 Access is limited to organization members
  • 🔐 Changes are audited — you can see who last updated each secret
  • 🔐 Rotate secrets regularly to reduce exposure risk