# Manage Secrets > For the complete documentation index, see [llms.txt](https://docs.redpanda.com/llms.txt). Component-specific: [cloud-data-platform-full.txt](https://docs.redpanda.com/cloud-data-platform-full.txt) --- title: Manage Secrets latest-operator-version: v26.1.4 latest-console-tag: v3.7.3 latest-connect-version: 4.93.0 latest-redpanda-tag: v26.1.9 docname: connect/configuration/secret-management page-component-name: cloud-data-platform page-version: master page-component-version: master page-component-title: Cloud page-relative-src-path: connect/configuration/secret-management.adoc page-edit-url: https://github.com/redpanda-data/cloud-docs/edit/main/modules/develop/pages/connect/configuration/secret-management.adoc description: Learn how to manage secrets in Redpanda Connect using the Cloud UI or Data Plane API, and how to add them to your data pipelines. page-git-created-date: "2024-12-03" page-git-modified-date: "2026-02-18" --- Learn how to manage secrets in Redpanda Connect, and how to add them to your data pipelines without exposing them. Secrets are stored in the secret management solution of your cloud provider and are retrieved when you run a pipeline configuration that references them. ## [](#manage-secrets)Manage secrets You can manage secrets from the Cloud UI or the Data Plane API. ### [](#create-a-secret)Create a secret You can create a secret and reference it in multiple data pipelines on the same cluster. #### Cloud UI 1. Log in to [Redpanda Cloud](https://cloud.redpanda.com). 2. Go to the **Secrets Store** page. 3. Click **Create secret**. 4. For **ID**, enter a name for the secret. You cannot rename the secret once it is created. 5. For **Value**, enter the secret you need to add. 6. For **Scopes**, select Redpanda Connect. 7. Optionally, add labels to help organize your secrets. 8. Click **Create**. You can now [add the secret to your data pipeline](#add-a-secret-to-a-data-pipeline). #### Data Plane API You must use a Base64-encoded secret. 1. [Authenticate and get the base URL](https://docs.redpanda.com/api/doc/cloud-dataplane/topic/topic-quickstart) for the Data Plane API. 2. Make a request to [`POST /v1/secrets`](https://docs.redpanda.com/api/doc/cloud-dataplane/operation/operation-secretservice_createsecret). ```bash curl -X POST "https:///v1/secrets" \ -H 'accept: application/json'\ -H 'authorization: Bearer '\ -H 'content-type: application/json' \ -d '{"id":"","scopes":["SCOPE_REDPANDA_CONNECT"],"secret_data":""}' ``` You must include the following values: - ``: The base URL for the Data Plane API. - ``: The API key you generated during authentication. - ``: The ID or name of the secret you want to add. Use only the following characters: `^[A-Z][A-Z0-9_]*$`. - ``: The Base64-encoded secret. - This scope: `"SCOPE_REDPANDA_CONNECT"`. The response returns the name of the secret and the scope `"SCOPE_REDPANDA_CONNECT"`. You can now [add the secret to your data pipeline](#add-a-secret-to-a-data-pipeline). ### [](#update-a-secret)Update a secret You can only update the secret value, not its name. > 📝 **NOTE** > > Changes to secret values do not take effect until a pipeline is restarted. #### Cloud UI 1. Log in to [Redpanda Cloud](https://cloud.redpanda.com). 2. Go to the **Secrets Store** page. 3. Find the secret you want to update, and click the edit icon. 4. Enter the new secret value or labels, and click **Update**. 5. Start and stop any pipelines that reference the secret. #### Data Plane API You must use a Base64-encoded secret. 1. [Authenticate and get the base URL](https://docs.redpanda.com/api/doc/cloud-dataplane/topic/topic-quickstart) for the Data Plane API. 2. Make a request to [`PUT /v1/secrets/{id}`](https://docs.redpanda.com/api/doc/cloud-dataplane/operation/operation-secretservice_updatesecret). ```bash curl -X PUT "https:///v1/secrets/" \ -H 'accept: application/json'\ -H 'authorization: Bearer '\ -H 'content-type: application/json' \ -d '{"scopes":["SCOPE_REDPANDA_CONNECT"],"secret_data":""}' ``` You must include the following values: - ``: The base URL for the Data Plane API. - ``: The name of the secret you want to update. - ``: The API key you generated during authentication. - This scope: `"SCOPE_REDPANDA_CONNECT"`. - ``: Your new Base64-encoded secret. The response returns the name of the secret and the scope `"SCOPE_REDPANDA_CONNECT"`. ### [](#delete-a-secret)Delete a secret Before you delete a secret, make sure that you remove references to it from your data pipelines. > 📝 **NOTE** > > Changes do not affect pipelines that are already running. #### Cloud UI 1. Log in to [Redpanda Cloud](https://cloud.redpanda.com). 2. Go to the **Secrets Store** page. 3. Find the secret you want to remove, and click the delete icon. 4. Confirm your deletion. #### Data Plane API 1. [Authenticate and get the base URL](https://docs.redpanda.com/api/doc/cloud-dataplane/topic/topic-quickstart) for the Data Plane API. 2. Make a request to [`DELETE /v1/secrets/{id}`](https://docs.redpanda.com/api/doc/cloud-dataplane/operation/operation-secretservice_deletesecret). ```bash curl -X DELETE "https:///v1/secrets/" \ -H 'accept: application/json'\ -H 'authorization: Bearer '\ ``` You must include the following values: - ``: The base URL for the Data Plane API. - ``: The name of the secret you want to delete. - ``: The API key you generated during authentication. ## [](#add-a-secret-to-a-data-pipeline)Add a secret to a data pipeline ### Cloud UI 1. Go to the **Connect** page, and create a pipeline (or open an existing pipeline to edit). 2. Click the **Secret** button to add a new or existing secret to the pipeline. ### Data Plane API You can add a secret to any pipeline in your cluster using the notation `${secrets.SECRET_NAME}`. For example: ```yml sasl: - mechanism: SCRAM-SHA-256 username: "user" password: "${secrets.PASSWORD}" ```