Secrets Manager is in public preview. To use it, opt in from the Secrets page.
Secrets Manager Overview
Last verified 3 Nov 2026
DigitalOcean Secrets Manager provides a central place to store and manage sensitive values used by applications running on DigitalOcean.
DigitalOcean Secrets Manager provides a central place to store and manage sensitive values used by applications running on DigitalOcean. Secrets Manager helps you keep passwords, API keys, access tokens, and other credentials out of source code, deployment manifests, and container images. You can create and update secrets in the DigitalOcean Control Panel or with doctl.
How Secrets Manager Works
A secret is a named, regional resource containing one or more key-value pairs. When you create a secret:
- You choose a name and DigitalOcean region.
- You add the values required by your application.
- Secrets Manager creates the initial active version.
When you update a secret, Secrets Manager creates a new active version. The application continues to use the same secret name.
What Secrets Manager Supports
Secrets Manager allows you to:
- Create secrets in a selected DigitalOcean region.
- Store multiple key-value pairs within a secret.
- Update secret values without changing the secret name.
- View the active version of a secret.
- Create and manage secrets through the DigitalOcean Control Panel.
- Create and manage secrets with doctl.