Secrets manager
A secure service for storing and retrieving sensitive credentials API keys, database passwords, certificates. AWS Secrets Manager, HashiCorp Vault, and 1Password for Teams are common choices. Eliminates hardcoded credentials in workflow code.
Expert insight
A dedicated secrets manager (rather than environment variables typed into a workflow platform's settings UI) adds access logging and rotation capability that most no-code platforms' built-in credential storage doesn't provide, worth the extra setup once more than a couple of people need controlled access to production credentials.
In a real workflow
API keys are stored in a secrets manager and injected at runtime.
Common mistakes
- Copies of secrets left in old workflows.
- No rotation policy.
Complexity level
Requires some familiarity with automation concepts.
Related terms
See it in action
Want Secrets manager built into your automation?
Book a free audit and we'll show you exactly how this applies to your business.
Get my free automation plan →Who we build for
Run a firm, an agency or an online store? We automate the work behind it.
Done-for-you n8n workflows and Claude AI agents, fixed price, maintained for you.
- Professional firms Onboarding, documents, billing and reporting run on their own. See what we automate →
- Agencies and SaaS teams Custom n8n and Claude builds, client reporting and internal tools. See what we automate →
- E-commerce brands Orders, support, returns and stock handled without the busywork. See what we automate →
More in Security
Keep exploring
Session management
Handling the lifecycle of authentication sessions in automation workfl…
Token refresh
Automatically obtaining a new access token before the current one expi…
Compliance automation
Using automation to enforce regulatory requirements continuously rathe…
Data masking
Replacing sensitive data fields with anonymised substitutes in non-pro…
Data retention
The policy governing how long data is stored before deletion. Automati…
Permissions (API)
The specific actions an API key or OAuth token is authorised to perfor…
Go deeper
Guides that cover Secrets manager
HR automation: 11 processes you should stop doing manually in 2026
HR teams spend 73% of their time on admin that could be automated. Here are the 11 processes consuming that time and exactly how to automate each one.
Automation consultant vs DIY: how to decide what is right for your business
Neither DIY nor hiring a consultant is universally right. The answer depends on five specific criteria and this guide gives you the framework to make the call confidently.
n8n Docker: The Production Deployment Guide (2026)
Running n8n via Docker for a quick test is one command. Running it reliably in production is a different exercise entirely. Here's the real Docker Compose setup we deploy for clients.