Skip to main content

Creating a secret

Go to Secrets and choose Create Secret. Under Secret details give it a Name and an optional Description, paste the first Value, and leave Encryption key on Platform-managed key (default) unless you want one of your own keys.The console takes the value as text and base64-encodes it for you; over the API you encode it yourself.
A secret is created with its first value — there is no such thing as an empty secret. The response is 201 and the secret is at version 1.
base64, 1 byte – 64 KiB
Values travel base64-encoded so arbitrary binary payloads survive JSON intact. Anything larger than 64 KiB belongs in a bucket, with the secret holding the reference and the credentials to fetch it — not crammed inline.
unique per account
Matches ^[a-zA-Z0-9][a-zA-Z0-9._/-]{0,255}$. Slashes are allowed, which is why prod/api/stripe-key works — and because the CRN is built from the name, a path convention becomes directly policy-able: crn:secrets:sa-saopaulo-1:my-account:secret/prod/*.