Secrets Manager Limits
Last verified 3 Nov 2026
DigitalOcean Secrets Manager provides a central place to store and manage sensitive values used by applications running on DigitalOcean.
DigitalOcean Secrets Manager has the following limitations.
Regional Availability
You can create secrets only in regions that Secrets Manager supports. A secret is stored in the region you select when you create it. Secrets Manager does not replicate secrets to other regions.
Credential Rotation
Updating a value in Secrets Manager does not automatically rotate the credential in the system that validates it.
For example, updating a database password in Secrets Manager does not change the password configured in the database. You must coordinate the credential change between Secrets Manager, the system that validates the credential, and the application that uses it.
Secret Versions
Secrets Manager retains the five most recent versions of a secret. Reverting to an earlier version creates a new version that contains the values from the earlier version.
Command-Line and API Support
Only documented doctl commands and API operations are supported. Control Panel functionality may be available before equivalent functionality is added to doctl or the API.
Service Quotas
Secrets Manager enforces the following quotas:
- Maximum key length: 512 characters
- Maximum total secret size: 512 KiB
- Versions retained per secret: 5
- API requests: 1,000 reads per minute and 50 writes per minute for each team