Secrets Manager

Overview

The Secrets Manager allows you to securely store API keys, tokens, and other sensitive data for your deployed apps. Secrets are encrypted in VULK and injected into the deployed app/backend runtime.

Accessing Secrets Manager

1. Deploy your project with backend
2. Go to Backend tab
3. Click Secrets Manager

Available Secret Types

Adding Custom Secrets

You can add any secret your app needs. The generated code will reference it via env.YOUR_SECRET_NAME or the equivalent runtime environment variable.

Security

How Secrets Are Stored

1. You enter the secret in the Secrets Manager
2. VULK encrypts and stores it in Secrets Manager
3. The deployed runtime receives it as an environment secret
4. Your app/backend can access it via env.SECRET_NAME
5. The secret value is never visible again - only the name is shown

Best Practices

• Never commit secrets to code
• Use different keys for test/production
• Rotate secrets periodically
• Use strong, random values for JWT_SECRET

Viewing Configured Secrets

The Secrets Manager shows which secrets are configured with a checkmark icon. You cannot view the actual values after saving.

Updating Secrets

To update a secret:

1. Enter the new value in the field
2. Click Save
3. The old value is replaced

The change takes effect immediately on the deployed runtime.