Secrets

Koyeb Secrets allow you to securely store and retrieve sensitive information like passwords or API tokens. They enable you to secure your code by removing hardcoded credentials and let you pass environment variables securely to your applications.

Another advantage of using Secrets is their re-usability, this means you can easily re-use a Secret value in different services.

All Secret values are automatically encrypted server-side to ensure secure storage. To prevent unauthorized access, Secrets access must be explicitly granted in your Services.

Create a Secret

A Secret is composed of a name and a value. The name of a Secret must comply with RFC1123, the DNS naming convention, and can only contain lowercase letters, numbers and dashes.

To manage secrets from your Koyeb Control Panel, click Secrets located in the top bar.

Using Secrets

Secrets can be used within services:

• To pull Docker Images, refer to Private Container Registry Secrets.
• To provide environment variables to your services, refer to Using environment variables and secrets.

Delete a Secret

Warning: Make sure no production service is using your secret before deleting it as this might generate production failures or outages.

Deleting a Secret is permanent and irreversible. When you delete a Secret, all resources using it will lose access to its value.