Secrets

W&B Secret Manager allows you to securely and centrally store, manage, and inject secrets, which are sensitive strings such as access tokens, bearer tokens, API keys, or passwords. W&B Secret Manager removes the need to add sensitive strings directly to your code or when configuring a webhook’s header or payload(/guides/core/automations/).

Secrets are stored and managed in each team’s Secret Manager, in the Team secrets section of the team settings.

Add a secret

To add a secret:

1. If the receiving service requires it to authenticate incoming webhooks, generate the required token or API key. If necessary, save the sensitive string securely, such as in a password manager.
2. Log in to W&B and go to the team’s Settings page.
3. In the Team Secrets section, click New secret.
4. Using letters, numbers, and _, provide a name for the secret.
5. Paste the sensitive string into the Secret field.
6. Click Add secret.

Specify the secrets you want to use for your webhook automation when you configure the webhook. See the Configure a webhook section for more information.

Rotate a secret

To rotate a secret and update its value:

1. Click the pencil icon in the secret’s row to open the secret’s details.
2. Set Secret to the new value. Optionally click Reveal secret to verify the new value.
3. Click Add secret. The secret’s value updates and no longer resolves to the previous value.

Delete a secret

To delete a secret:

1. Click the trash icon in the secret’s row.
2. Read the confirmation dialog, then click Delete. The secret is deleted immediately and permanently.

Manage access to secrets

Each member of a team have access to its secrets. To revoke access to a secret from a particular member, remove that member from the team.