Cloudflare Launches Beta for Secure Secrets Management Store

Originally published at ssojet Cloudflare has launched the public beta of Cloudflare Secrets Store during Developer Week 2025. This service provides a secure method for developers to store API tokens, keys, and credentials. Initially designed to integrate with various Cloudflare products, the current focus is on Cloudflare Workers. The Secrets Store allows for the secure management of secrets necessary for applications, including API tokens and request authorization headers. As noted by Cloudflare product manager Mia Malden: Environment variables and secrets were first launched in Cloudflare Workers back in 2020. Now, there are millions of local secrets deployed on Workers scripts. However, these are not all unique (...) With thousands of secrets duplicated across scripts — each requiring manual creation and updates — scoping secrets to individual Workers has created significant friction for developers. Now, you can create account-level secrets and variables that can be shared across all Workers scripts, centrally managed and protected within the Secrets Store. Previously, the documentation highlighted that Worker secrets are tied to the account role, which can be modified by anyone who has access to the Worker. In contrast, access to account-level secrets is governed by role-based access control (RBAC), and all changes are logged in the audit trails. Cloudflare's transition to a more integrated approach is evident in the features being rolled out. Users can now create bindings to the Secrets Store itself, allowing Workers to access any secret within the store. Future updates will enable the creation of multiple secret stores to manage access policies effectively. Features of Cloudflare Secrets Store The Secrets Store beta offers several features that enhance usability for developers: Secrets Store UI & API: Users can create, duplicate, update, scope, and delete secrets. Workers UI: Bind new or existing account-level secrets to Workers and deploy them in code. Wrangler Integration: Create and manage secrets directly via the command line with commands like: wrangler secrets-store store create --remote Account Management: Assign permissions and monitor audit logs related to actions taken in the Secrets Store. For detailed instructions, developers can refer to the Cloudflare developer documentation. Importance of Secrets Management Effective secrets management is critical in today’s cybersecurity landscape. The growing complexity of Non-Human Identities (NHIs) highlights the need for robust management strategies. NHIs are machine identities that play a significant role in cybersecurity, and understanding their management is essential to prevent security breaches. In the context of secrets management, NHIs serve as unique identifiers, similar to passports, with permissions analogous to visas. Managing NHIs involves safeguarding both the identities and their access permissions while monitoring interactions within systems. A comprehensive approach to managing NHIs involves: Discovery and Classification: Identifying and categorizing secrets. Threat Detection: Recognizing potential vulnerabilities. Remediation: Implementing measures to mitigate risks. State-of-the-art platforms for NHI management provide insights into ownership, permissions, usage patterns, and vulnerabilities, which are vital for context-aware security measures. Strategic Advantages of Efficient Secrets Management Implementing effective secrets management strategies offers numerous benefits: Reduced Risk: Proactively identifying and mitigating risks decreases the likelihood of data breaches. Improved Compliance: Efficient management of policies and audit trails supports regulatory adherence. Increased Efficiency: Automation of secrets management tasks allows security teams to focus on strategic initiatives. Enhanced Visibility and Control: Centralized management provides a comprehensive view of data security. Cost Savings: Automating processes like secrets rotation leads to reduced operational costs. With cyber threats continually evolving, organizations must prioritize their secrets management strategies to safeguard their data and maintain trust with customers and partners. Explore SSOJet for Secure Authentication Solutions For organizations looking to enhance their security posture, SSOJet offers an API-first platform that simplifies secure single sign-on (SSO) and user management. With features like directory sync, SAML, OIDC, and magic link authentication, SSOJet enables enterprises to implement robust identity and access management solutions. To explore our services or for more information, visit SSOJet.

Apr 30, 2025 - 20:23

Cloudflare Launches Beta for Secure Secrets Management Store

Originally published at ssojet

Cloudflare has launched the public beta of Cloudflare Secrets Store during Developer Week 2025. This service provides a secure method for developers to store API tokens, keys, and credentials. Initially designed to integrate with various Cloudflare products, the current focus is on Cloudflare Workers.

The Secrets Store allows for the secure management of secrets necessary for applications, including API tokens and request authorization headers. As noted by Cloudflare product manager Mia Malden:

Environment variables and secrets were first launched in Cloudflare Workers back in 2020. Now, there are millions of local secrets deployed on Workers scripts. However, these are not all unique (...) With thousands of secrets duplicated across scripts — each requiring manual creation and updates — scoping secrets to individual Workers has created significant friction for developers. Now, you can create account-level secrets and variables that can be shared across all Workers scripts, centrally managed and protected within the Secrets Store.

Previously, the documentation highlighted that Worker secrets are tied to the account role, which can be modified by anyone who has access to the Worker. In contrast, access to account-level secrets is governed by role-based access control (RBAC), and all changes are logged in the audit trails.

Cloudflare's transition to a more integrated approach is evident in the features being rolled out. Users can now create bindings to the Secrets Store itself, allowing Workers to access any secret within the store. Future updates will enable the creation of multiple secret stores to manage access policies effectively.

Features of Cloudflare Secrets Store

The Secrets Store beta offers several features that enhance usability for developers:

Secrets Store UI & API: Users can create, duplicate, update, scope, and delete secrets.
Workers UI: Bind new or existing account-level secrets to Workers and deploy them in code.
Wrangler Integration: Create and manage secrets directly via the command line with commands like:

  wrangler secrets-store store create  --remote

Account Management: Assign permissions and monitor audit logs related to actions taken in the Secrets Store.

For detailed instructions, developers can refer to the Cloudflare developer documentation.

Importance of Secrets Management

Effective secrets management is critical in today’s cybersecurity landscape. The growing complexity of Non-Human Identities (NHIs) highlights the need for robust management strategies. NHIs are machine identities that play a significant role in cybersecurity, and understanding their management is essential to prevent security breaches.

In the context of secrets management, NHIs serve as unique identifiers, similar to passports, with permissions analogous to visas. Managing NHIs involves safeguarding both the identities and their access permissions while monitoring interactions within systems.

A comprehensive approach to managing NHIs involves:

Discovery and Classification: Identifying and categorizing secrets.
Threat Detection: Recognizing potential vulnerabilities.
Remediation: Implementing measures to mitigate risks.

State-of-the-art platforms for NHI management provide insights into ownership, permissions, usage patterns, and vulnerabilities, which are vital for context-aware security measures.

Strategic Advantages of Efficient Secrets Management

Implementing effective secrets management strategies offers numerous benefits:

Reduced Risk: Proactively identifying and mitigating risks decreases the likelihood of data breaches.
Improved Compliance: Efficient management of policies and audit trails supports regulatory adherence.
Increased Efficiency: Automation of secrets management tasks allows security teams to focus on strategic initiatives.
Enhanced Visibility and Control: Centralized management provides a comprehensive view of data security.
Cost Savings: Automating processes like secrets rotation leads to reduced operational costs.

With cyber threats continually evolving, organizations must prioritize their secrets management strategies to safeguard their data and maintain trust with customers and partners.

Explore SSOJet for Secure Authentication Solutions

For organizations looking to enhance their security posture, SSOJet offers an API-first platform that simplifies secure single sign-on (SSO) and user management. With features like directory sync, SAML, OIDC, and magic link authentication, SSOJet enables enterprises to implement robust identity and access management solutions.

To explore our services or for more information, visit SSOJet.