Skip to main content
A record stores one encrypted value or structured secret for a project. Your role and access scope determine which records you can see and what you can change. Health and access scope describe different properties. Health comes from the record’s due date. Access scope is always shown explicitly as General or Per environment. One indicator never replaces or implies the other.

​
Create a record

  1. Open Records. This list includes records you own and records shared with you across all projects.
  2. Select New record and choose the record format.
  3. In the creation form, choose the project that should own the record.
  4. Give the record a clear name and choose its access scope.
  5. Enter the value and confirm the creation.
Check the project and access scope before you confirm. A record can be sensitive even when its name is not.

​
View and update a value

Open a record and choose the Secret tab. Select Reveal only when you need to inspect the value. Select Edit secret to make a change, then save it. Each saved update creates a new version. Use the History tab to review earlier versions and the change that created them.

​
Use environments when values differ

An Environment record can keep separate values for Development, Staging, and Production. Choose the environment before you reveal or update a value. A missing value in one environment does not change the values stored in the others.

​
Share and revoke access

Use the Sharing tab to share a record with an eligible member or group. Review the recipient before you confirm. Revoke access from the same tab when the recipient no longer needs the record. Revoking access removes future access; it does not erase copies a person may already have made while they were authorized.

​
Rotate encryption and review activity

Select Rotate encryption key when your process requires a new encryption key for the record. Review History afterward to confirm the rotation created a new version. Use the Audit tab to review record creation, updates, rotations, shares, and revocations.

​
Archive a record

Archive a record when it is no longer active. Open Overview, select Archive, and confirm the record name in the dialog. Review its history and sharing before archiving it. Read Operating safely before a broad access or encryption change.