About the Secrets Manager

The Secrets Manager lets you securely store and manage secrets for use in your site's code. A secret is any sensitive piece of information, such as an API key, OAuth token, or environment configuration value.

Add secrets in the Secrets Manager by assigning each secret a unique name. You can then retrieve it in your site's backend code using the Secrets API.

Enhanced security

Hardcoding secrets directly into your code creates security risks that can lead to data breaches and unauthorized access.

Here's how the Secrets Manager improves your site's security:

• Code sharing: Collaborating on code or managing it in a public repository increases the risk of accidentally leaking secrets.
• Code reusability: Because code is often reused, hardcoded secrets can be copied and exposed unintentionally.

Secret fields

Field name	Field description	Requirements	Required
Name	ID you assign to the secret. Access it in code using the Secrets API.	40 character maximum. Only letters (a-z) and numbers. No spaces or special characters except hyphens (-) and underscores (_). Can't begin with wix, regardless of case.	Yes
Value	Value of the secret.	3,500 character maximum.	Yes
Description	Information about the secret.	200 characters maximum.	No

Roles and permissions

Only site collaborators with the role Admin (Co-Owner) or Website Manager can access the Secrets Manager. Learn more about roles and permissions.

See also

• Manage Secrets in the Secrets Manager
• Wix Secrets API