Secrets

ungrouped like they carry a hand-typed category prefix. Converting them sets the category properly. The address does not change, so nothing that uses them breaks.

Store encrypted key-value secrets, referenced in scripts as ${SECRET:KEY_NAME}. Secrets in a collection are addressed COLLECTION_NAME (e.g. a secret API in collection GITHUB → GITHUB_API).

No secrets match the current filter.

Name

Collection (optional)

Addressed as — renamed from . Anything referencing the old address will stop resolving.

This is a set (several named fields under one entry)

Shared all-or-nothing: a token granted this set gets every field. Group by sensitivity, not by subject.

Fields

Field names may contain letters, digits and underscore. Address one as .

Value

Expires At (optional)

Note (optional)

Documentation, stored unencrypted so it can be listed and searched without decrypting the secret. Do not put secret material here.

Tags (optional)

Metadata such as owner or environment. Unencrypted so it can be listed and searched without decrypting the secret. Do not put secret material here.

Tags are available on Pro and Ultimate.

Collections

View Secret:

Value

Audit Log:

Action	IP Address	Time

Promote name prefixes to categories

Each name is split at its first underscore. The resulting address is unchanged, so callers keep working. Rows whose prefix matches a category you already have are pre-selected; the others would create a new category, so check those yourself.

	Secret	Category	Addressed as
		(new category)