--- title: "#secrets-management articles | Hashnode" description: "Explore 132 articles tagged #secrets-management on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/secrets-management" --- Tag # #secrets-management 132 posts · 1 followers [Doug Niccum](https://hashnode.com/@dougniccum) · [Nov 5](https://hashnode.com/posts/drone-env-vars-complete-reference/6aec9324b7e07ba609d4d820) ### [Drone env vars: the complete reference](https://notes.secretstash.cloud/drone-env-vars-complete-reference?utm_source=hashnode&utm_medium=feed) Built-in DRONE\_\* variables, pipeline and step scoping, from\_secret, debugging, and when a dedicated secrets manager beats Drone-native secrets. 12 min read · [notes.secretstash.cloud](https://notes.secretstash.cloud/drone-env-vars-complete-reference?utm_source=hashnode&utm_medium=feed) [Ferhat Yildiz](https://hashnode.com/@turingts) · [Oct 31](https://hashnode.com/posts/managing-secrets-on-eks-with-external-secrets-operator-and-aws-secrets-manager/6aeb59d28b5f4375ff04787d) ### [Managing Secrets on EKS with External Secrets Operator and AWS Secrets Manager](https://blog.turingts.com/managing-secrets-on-eks-with-external-secrets-operator-and-aws-secrets-manager?utm_source=hashnode&utm_medium=feed) Applications running on EKS often need access to secrets. This guide shows how External Secrets Operator automatically synchronizes secrets from AWS Secrets Manager into Kubernetes Secrets that containers can consume. 25 min read · [blog.turingts.com](https://blog.turingts.com/managing-secrets-on-eks-with-external-secrets-operator-and-aws-secrets-manager?utm_source=hashnode&utm_medium=feed) [Cruxtab Technologies Pvt. Ltd.](https://hashnode.com/@cruxtab) · [Oct 30](https://hashnode.com/posts/protecting-api-credentials-in-shopify-app-integrations/6ae46497558620bf6a5b1f89) ### [Protecting API Credentials in Shopify App Integrations](https://cruxtab-technologies.hashnode.dev/protecting-api-credentials-in-shopify-app-integrations?utm_source=hashnode&utm_medium=feed) Learn how to protect API keys, service-account credentials, and webhook URLs in Shopify applications using server-side processing and secure configuration. 3 min read · [cruxtab-technologies.hashnode.dev](https://cruxtab-technologies.hashnode.dev/protecting-api-credentials-in-shopify-app-integrations?utm_source=hashnode&utm_medium=feed) [Doug Niccum](https://hashnode.com/@dougniccum) · [Oct 13](https://hashnode.com/posts/angular-where-to-store-api-keys-frontend-vs-backend/6ace5d9a741b83f37699cde1) ### [Angular where to store API keys: frontend vs backend](https://blog.dniccumdesign.com/angular-where-to-store-api-keys-frontend-vs-backend?utm_source=hashnode&utm_medium=feed) Anything in your Angular bundle is public. Learn which API keys are safe in environment.ts and how to move secret keys behind a backend proxy. 12 min read · [blog.dniccumdesign.com](https://blog.dniccumdesign.com/angular-where-to-store-api-keys-frontend-vs-backend?utm_source=hashnode&utm_medium=feed) [Rahul R](https://hashnode.com/@rahul-data) · [Oct 9](https://hashnode.com/posts/stop-hardcoding-api-keys-a-practical-guide-to-fetching-secrets-from-hashicorp-vault/6ac92d38ba4ad692bb935179) ### [Stop Hardcoding API Keys: A Practical Guide to Fetching Secrets from HashiCorp Vault](https://rahul-dataeng.hashnode.dev/stop-hardcoding-api-keys-a-practical-guide-to-fetching-secrets-from-hashicorp-vault?utm_source=hashnode&utm_medium=feed) A backend application securely connecting to a Vault server, with database credentials and API keys represented as protected secrets. 8 min read · [rahul-dataeng.hashnode.dev](https://rahul-dataeng.hashnode.dev/stop-hardcoding-api-keys-a-practical-guide-to-fetching-secrets-from-hashicorp-vault?utm_source=hashnode&utm_medium=feed) [Madhav Bhasin](https://hashnode.com/@madhavbhasin) · [Sep 11](https://hashnode.com/posts/managing-state-secrets-and-environments-in-terraform/6aa37feaa756534e27016d5a) ### [Managing State, Secrets, and Environments in Terraform](https://blog.madhav.dev/managing-state-secrets-and-environments-in-terraform?utm_source=hashnode&utm_medium=feed) S01E03 of Terraform for Application Engineers 6 min read · [blog.madhav.dev](https://blog.madhav.dev/managing-state-secrets-and-environments-in-terraform?utm_source=hashnode&utm_medium=feed) [Manu Shukla](https://hashnode.com/@mr-manushukla) · [Aug 24](https://hashnode.com/posts/vercel-connect-reached-v0-apps-on-21-august-2026-with-2-connector-types-that-still-store-a-long-live/6a8ba17f4e42b99a4416c45d) ### [Vercel Connect reached v0 apps on 21 August 2026 with 2 connector types that still store a long-lived secret](https://ecorpit.hashnode.dev/vercel-connect-reached-v0-apps-on-21-august-2026-with-2-connector-types-that-still-store-a-long-live?utm_source=hashnode&utm_medium=feed) Vercel Connect reached v0 apps on 21 August 2026 with 2 connector types that still store a long-lived secret Summary. Vercel's changelog of 21 August 2026 says apps built in v0 can reach "100+ third-p 13 min read · [ecorpit.hashnode.dev](https://ecorpit.hashnode.dev/vercel-connect-reached-v0-apps-on-21-august-2026-with-2-connector-types-that-still-store-a-long-live?utm_source=hashnode&utm_medium=feed) [RelayRouter](https://hashnode.com/@vectronodeapi) · [Aug 15](https://hashnode.com/posts/how-to-rotate-an-openai-compatible-api-key-without-dropping-requests/6a800275a44756ff05342dbc) ### [How to Rotate an OpenAI-Compatible API Key Without Dropping Requests](https://vectronode.hashnode.dev/how-to-rotate-an-openai-compatible-api-key-without-dropping-requests?utm_source=hashnode&utm_medium=feed) Implement a two-key rotation workflow for Python clients with validation, rolling cutover, redacted logs, and a safe revoke order. 11 min read · [vectronode.hashnode.dev](https://vectronode.hashnode.dev/how-to-rotate-an-openai-compatible-api-key-without-dropping-requests?utm_source=hashnode&utm_medium=feed) [Anakin Tech](https://hashnode.com/@anakinwriters) · [Aug 12](https://hashnode.com/posts/secret-vault-integrations-fail-at-the-permission-boundary/6a7c454d2463021b3626008d) ### [Secret Vault Integrations Fail at the Permission Boundary](https://anakinwriters.hashnode.dev/secret-vault-integrations-fail-at-the-permission-boundary?utm_source=hashnode&utm_medium=feed) A practical comparison of 1Password and Azure Key Vault for automated logins, focused on scoping, RBAC failures, secret shape, and rotation. 8 min read · [anakinwriters.hashnode.dev](https://anakinwriters.hashnode.dev/secret-vault-integrations-fail-at-the-permission-boundary?utm_source=hashnode&utm_medium=feed) [RelayRouter](https://hashnode.com/@vectronodeapi) · [Jul 22](https://hashnode.com/posts/how-to-protect-llm-api-keys-in-browser-based-ai-apps/6a605dcc3b7bf79e2e1df80d) ### [How to Protect LLM API Keys in Browser-Based AI Apps](https://vectronode.hashnode.dev/how-to-protect-llm-api-keys-in-browser-based-ai-apps?utm_source=hashnode&utm_medium=feed) Keep LLM and media API keys out of frontend bundles by routing requests through a server-owned authentication and policy boundary. 1 min read · [vectronode.hashnode.dev](https://vectronode.hashnode.dev/how-to-protect-llm-api-keys-in-browser-based-ai-apps?utm_source=hashnode&utm_medium=feed)