About the Secrets Manager
The Secrets Manager allows you to securely store and manage secrets. A secret is any piece of sensitive information used in your site's code, such as API keys, OAuth tokens, and environment configuration settings.
Add secrets to the Secrets Manager in your dashboard by assigning each secret a unique name. You can then use that name to retrieve the secret in code using the Secrets API.
Enhanced security
Hardcoding secrets into your code can create security risks for your site, which can lead to data breaches and unauthorized access to your site.
Here's how the Secrets Manager improves your site's security:
- Code sharing: You may want to collaborate and share your code with others or manage it in a public repository, increasing the potential for accidentally leaking secrets.
- Code reusability: Since code is often reused, your hardcoded secrets may be copied, increasing risk of exposure.
Secret fields
It’s important to understand the rules and limitations of a secret within the Secrets Manager.
| Field name | Field description | Requirements | Required field |
|---|---|---|---|
| Name | ID you assign to the secret. Access it in code using the Secrets API. |
| Yes |
| Value | Value of the secret. |
| Yes |
| Description | Information about the secret. |
| No |
Roles and permissions
Only site collaborators with the general role of Admin (Co-Owner) or Website Manager have access to the Secrets Manager. Learn more about roles and permissions.
Important:
- Transferring a site results in secrets being transferred to the new owner.
- Duplicating a site doesn't result in secrets being transferred to the duplicate site.
See also
- Manage Secrets in the Secrets Manager in the Secrets Manager.
- About the Wix Secrets API