---
title: "Write-only secrets - Deplo"
description: "A secret is never returned by the API, never rendered back to you, and has no reveal button anywhere in the product. It is immutable: changing one means deleting it and adding it again, which is what rotating a credential is."
url: "https://web-isometric-9487cf1e.deplo.site/features/write-only-secrets"
image: "https://web-isometric-9487cf1e.deplo.site/api/media/file/write-only-secrets.webp"
updated: "2026-09-06"
---

# Write-only secrets

A secret is never returned by the API, never rendered back to you, and has no reveal button anywhere in the product. It is immutable: changing one means deleting it and adding it again, which is what rotating a credential is.

![Write-only secrets](https://web-isometric-9487cf1e.deplo.site/api/media/file/write-only-secrets.webp)

## Why it matters

No screen, no token and no export can leak what the panel stores. Rendered stacks are masked on the way out, the basic-auth hash included.

[Learn more](https://web-isometric-9487cf1e.deplo.site/docs/concepts/how-deplo-works#how-secrets-move)

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Organization",
      "@id": "https://web-isometric-9487cf1e.deplo.site/#organization",
      "name": "Deplo",
      "url": "https://web-isometric-9487cf1e.deplo.site",
      "description": "Ridicolously good alternative to cloud providers.",
      "logo": {
        "@type": "ImageObject",
        "url": "https://web-isometric-9487cf1e.deplo.site/api/media/file/og_logo.png",
        "width": 824,
        "height": 824
      },
      "sameAs": [
        "https://ds.deplo.build",
        "https://x.com/deplocloud",
        "https://www.instagram.com/deplocloud",
        "https://github.com/DeploCloud/deplo"
      ]
    },
    {
      "@type": "WebSite",
      "@id": "https://web-isometric-9487cf1e.deplo.site/#website",
      "name": "Deplo",
      "url": "https://web-isometric-9487cf1e.deplo.site",
      "description": "Ridicolously good alternative to cloud providers.",
      "publisher": {
        "@id": "https://web-isometric-9487cf1e.deplo.site/#organization"
      }
    }
  ]
}
```

```json
{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "position": 1,
      "name": "Features",
      "item": "https://web-isometric-9487cf1e.deplo.site/features"
    },
    {
      "@type": "ListItem",
      "position": 2,
      "name": "Write-only secrets",
      "item": "https://web-isometric-9487cf1e.deplo.site/features/write-only-secrets"
    }
  ]
}
```