ToolypetMCP
intermediate4 minutessecurity

Secret Management Workflow

Generate, categorize, and secure application secrets: API keys, JWT secrets, encryption keys, and DB passwords.

secretsapi-keysenvironmentmanagement

Quando usar esta receita

Generate all the secrets needed for a new application deployment. Each secret type has different requirements for length, format, and rotation frequency.

Etapas

1

Generate API key

Prompt:Generate a 512-bit API key in base64 for external API authentication
2

Generate JWT secret

Prompt:Generate a 256-bit hex secret for JWT token signing
3

Generate encryption key

Prompt:Generate a 256-bit hex key for AES encryption of sensitive data
4

Generate DB password

Prompt:Generate a 32-character database password with all character types
5

Create audit hashes

Prompt:Hash all secrets with SHA-256 for audit logging (store hashes, not raw secrets)

Perguntas frequentes

Where should I store application secrets?

Never in code or git. Use: environment variables (dev), AWS Secrets Manager / HashiCorp Vault (production), or .env files (local dev only, gitignored).

How do I manage secret rotation?

Use a secrets manager with rotation policies. Deploy with dual-key support (accept both old and new during rotation window). Automate rotation with CI/CD pipelines.

Receitas relacionadas