Secrets Manager Limits

Last verified 3 Nov 2026

DigitalOcean Secrets Manager provides a central place to store and manage sensitive values used by applications running on DigitalOcean.

DigitalOcean Secrets Manager has the following limitations.

Regional Availability

You can create secrets only in regions that Secrets Manager supports. A secret is stored in the region you select when you create it. Secrets Manager does not replicate secrets to other regions.

Credential Rotation

Updating a value in Secrets Manager does not automatically rotate the credential in the system that validates it.

For example, updating a database password in Secrets Manager does not change the password configured in the database. You must coordinate the credential change between Secrets Manager, the system that validates the credential, and the application that uses it.

Secret Versions

Secrets Manager retains the five most recent versions of a secret. Reverting to an earlier version creates a new version that contains the values from the earlier version.

Command-Line and API Support

Only documented doctl commands and API operations are supported. Control Panel functionality may be available before equivalent functionality is added to doctl or the API.

Service Quotas

Secrets Manager enforces the following quotas:

  • Maximum key length: 512 characters
  • Maximum total secret size: 512 KiB
  • Versions retained per secret: 5
  • API requests: 1,000 reads per minute and 50 writes per minute for each team

We can't find any results for your search.

Try using different keywords or simplifying your search terms.