# rpk security

> For the complete documentation index, see [llms.txt](https://docs.redpanda.com/llms.txt). Component-specific: [cloud-data-platform-full.txt](https://docs.redpanda.com/cloud-data-platform-full.txt)

---
title: rpk security
latest-operator-version: v26.2.1
latest-console-tag: v3.10.0
latest-connect-version: 4.104.0
latest-redpanda-tag: v26.2.1
docname: rpk/rpk-security/rpk-security
page-component-name: cloud-data-platform
page-version: master
page-component-version: master
page-component-title: Cloud
page-relative-src-path: rpk/rpk-security/rpk-security.adoc
page-edit-url: https://github.com/redpanda-data/cloud-docs/edit/main/modules/reference/pages/rpk/rpk-security/rpk-security.adoc
description: Manage Redpanda security.
page-git-created-date: "2024-07-25"
page-git-modified-date: "2026-08-11"
---

<!-- Source: https://docs.redpanda.com/cloud-data-platform/reference/rpk/rpk-security/rpk-security.md -->

Manage Redpanda security.

## [](#usage)Usage

```bash
rpk security [flags]
```

## [](#aliases)Aliases

```bash
rpk sec
```

## [](#subcommands)Subcommands

| Command | Description |
| --- | --- |
| rpk security acl | Manage ACLs and SASL users. This command space creates, lists, and deletes ACLs, as well as creates SASL users. |
| rpk security role | Manage Redpanda roles. |
| rpk security secret | Manage secrets for Redpanda Cloud clusters. This command allows you to manage secrets for your cloud clusters. |
| rpk security user | Manage SASL users. If SASL is enabled, a SASL user is what you use to talk to Redpanda, and ACLs control what your user has access to. |

## [](#global-flags)Global flags

| Value | Type | Description |
| --- | --- | --- |
| --config | string | Redpanda or rpk config file; default search paths are ~/.config/rpk/rpk.yaml, $PWD/redpanda.yaml, and /etc/redpanda/redpanda.yaml. |
| -X, --config-opt | stringArray | Override rpk configuration settings; -X help for detail or -X list for terser detail. |
| --ignore-profile | bool | Ignore rpk.yaml and redpanda.yaml; use default settings. |
| --profile | string | rpk profile to use. |
| -v, --verbose | bool | Enable verbose logging. |