Security & Privacy
Secrets management
Securely storing and controlling access to passwords, API keys, tokens, and credentials.
Example
API keys are stored in a protected vault instead of source code.
Why it matters
It reduces the chance that access details are exposed or reused without permission.
You'll hear it
“That access key should not be pasted into the chat.”
Can you control it?
Set by the team
The people building or running the AI choose this setup. An everyday user generally needs their help to change how this part works.
Common questions
- Does hiding a password in a prompt keep it secure?
- No. A prompt is not a dependable place to store secrets.
- Can an old credential remain risky after a project ends?
- Yes. It may still grant access until it expires or is disabled.
- Does replacing a leaked key undo earlier misuse?
- No. It stops future use of that key but does not reverse actions already taken.