doctl secrets unset
Generated on 3 Aug 2026
from doctl version
v1.166.0
Usage
doctl secrets unset <name> [flags]Description
Removes key-value pairs from a secret without affecting other keys.
Fetches the current secret, removes the specified keys, and writes a new version.
Example
The following example removes a key from a secret:
doctl secrets unset my-secret --region nyc3 --key other-keyFlags
| Option | Description |
|---|---|
--format |
Columns for output in a comma-separated list. Possible values: Name, Region, Version. |
--help, -h |
Help for this command |
--key |
Key to remove (repeatable). (required) |
--no-header |
Return raw data with no headers Default: false |
--region |
Region where the secret is stored. If omitted, you are prompted when running with –interactive. |
Related Commands
| Command | Description |
|---|---|
| doctl secrets | Display commands to manage Secrets Manager |
Global Flags
| Option | Description |
|---|---|
--access-token, -t |
API V2 access token |
--api-url, -u |
Override default API endpoint |
--config, -c |
Specify a custom config file Default: |
--context |
Specify a custom authentication context name |
--http-retry-max |
Set maximum number of retries for requests that fail with a 429 or 500-level error
Default: 5 |
--http-retry-wait-max |
Set the minimum number of seconds to wait before retrying a failed request
Default: 30 |
--http-retry-wait-min |
Set the maximum number of seconds to wait before retrying a failed request
Default: 1 |
--interactive |
Enable interactive behavior. Defaults to true if the terminal supports it (default false)
Default: false |
--output, -o |
Desired output format [text|json] Default: text |
--trace |
Show a log of network activity while performing a command Default: false |
--verbose, -v |
Enable verbose output Default: false |