---
title: Manage secrets
description: Manage, use, and store secrets in InfluxDB.
url: https://docs.influxdata.com/influxdb/v2/admin/secrets/
estimated_tokens: 466
product: InfluxDB OSS v2
version: v2
publisher: InfluxData
canonical: https://docs.influxdata.com/influxdb/v2/admin/secrets/
date: '2023-11-06T15:53:12-07:00'
lastmod: '2023-11-06T15:53:12-07:00'
---

This page documents an earlier version of InfluxDB OSS.[InfluxDB 3 Core](/influxdb3/core/) is the latest stable version.

> [!Important]
> #### API token hashing is enabled by default in InfluxDB OSS 2.9.0
>
> Stronger token security: tokens are stored as hashes on disk, so a
> copy of the database file doesn’t expose usable tokens. Existing
> tokens are hashed on first startup and the original strings can’t
> be recovered afterward — **capture any plaintext tokens you still
> need before you upgrade**.
>
> For more information, see [Token hashing](/influxdb/v2/admin/tokens/#token-hashing).

Secrets are key-value pairs that contain sensitive information you want to control
access to, such as API keys, passwords, or certificates.
There are two options for storing secrets with InfluxDB:

* By default, secrets are Base64-encoded and stored in the InfluxDB embedded key value store,[BoltDB](https://github.com/boltdb/bolt).
* You can also set up a Vault server to store secrets.
  For details, see [Store secrets in Vault](/influxdb/v2/admin/secrets/use-vault).

### [Add secrets](/influxdb/v2/admin/secrets/add/)

Add secrets using the `influx` CLI or the InfluxDB API.

### [View secret keys](/influxdb/v2/admin/secrets/view/)

View secret keys using the `influx` CLI or the InfluxDB API.

### [Update secrets](/influxdb/v2/admin/secrets/update/)

Update secrets using the `influx` CLI or the InfluxDB API.

### [Delete secrets](/influxdb/v2/admin/secrets/delete/)

Delete secrets using the `influx` CLI or the InfluxDB API.

### [Use secrets](/influxdb/v2/admin/secrets/use/)

Use secrets in a query with Flux.

### [Store secrets in Vault](/influxdb/v2/admin/secrets/use-vault/)

Use Vault as an InfluxDB secret store and manage secrets through the in InfluxDB API.

[secrets](/influxdb/v2/tags/secrets/)[security](/influxdb/v2/tags/security/)