Glossary
Filter
.
.env Files.env files store value pairs to be substituted for their respective environment variables before a program is executed.
A
API KeysAPI keys are unique credentials used to authenticate and authorize applications accessing APIs, ensuring secure communication between systems.
Access PoliciesAccess policies define rules for granting, restricting, and managing user permissions to systems, data, and resources.
Access TokensAccess tokens are credentials used to authenticate and authorize users or applications to access resources securely.
Application Programming Interface (API)An API (Application Programming Interface) enables software systems to communicate by defining how they request and exchange data.
Application SecretsApplication secrets are sensitive credentials like API keys, database passwords, and tokens that apps use to authenticate and communicate securely.
Audit LogsAudit logs are the records created after changes are made. They contain the change, when it was made, and by whom.
C
Cloud Secrets ManagerA cloud secrets manager securely stores and manages API keys, passwords, and other sensitive credentials in the cloud.
Command LineA command line is a text-based interface where users execute commands to control a computer, automate tasks, and manage files efficiently.
Configuration DriftConfiguration Drift describes the gap between the desired application configuration and the actual configuration on a server that comes as a result of configuration synchronization.
Credential ManagementCredential management securely stores, retrieves, and rotates authentication credentials like API keys, passwords, and certificates.
D
Database CredentialsDatabase credentials are authentication details, like usernames and passwords, that grant access to a database securely.
Dynamic Key GenerationDynamic Key Generation creates cryptographic keys on demand, enhancing security by reducing exposure and mitigating key reuse risks.
Dynamic SecretsDynamic secrets are temporary, just-in-time credentials that reduce risk by expiring after use or a set time.
E
Encryption at RestEncryption at rest protects stored data by converting it into an unreadable format, preventing unauthorized access.
Encryption in TransitEncryption in transit protects data as it moves across networks, preventing interception by unauthorized parties.
Environment Specific SecretsSecrets that are unique across different development environments (staging, development, production).
Environment VariablesEnvironment Variables are used as placeholders within code that have actual values substituted for them, so code may be executed or shared without exposing the sensitive information they represent.
H
Hardcoded SecretsWhen secrets are written directly into code, exposing sensitive information to anyone who can inspect it.
I
K
Key Management System (KMS)A key management system organizes and oversees the lifecycle of cryptographic keys and digital certificates for the entire platform.
L
Least PrivilegeLeast privilege is a design philosophy centered around minimizing the access of any single agent within a system.
M
Multi-Factor Authentication (MFA)Multi-factor authentication is a verification process that requires two or more services to prove someone’s identity when they are logging in to a secure service.
R
Role-Based Access Control (RBAC)RBAC is a security model that grants access based on user roles and responsibilities.
S
Scoped SecretsScoped secrets restrict access based on context, ensuring credentials are used only where and when they're needed.
Secret ReferencesSecret references let developers access sensitive data without exposing raw secrets, enhancing security and compliance.
Secret VaultsSecure, encrypted storage for sensitive credentials like API keys, passwords, and certificates, ensuring only authorized access.
Secrets ExpirationSecrets expiration enforces automatic rotation or deactivation of sensitive credentials to reduce security risks.
Secrets InjectionSecrets injection securely delivers API keys, credentials, and other sensitive data into applications at runtime.
Secrets Lifecycle ManagementSecrets lifecycle management ensures sensitive credentials are securely created, stored, rotated, and revoked throughout their lifespan.
Secrets ManagementSecrets management protects sensitive credentials like API keys and database passwords, ensuring secure storage, access, and rotation.
Secrets RotationSecrets rotation updates sensitive credentials on a regular schedule to reduce the risk of exposure and misuse.
Secrets SprawlSecrets sprawl occurs when sensitive credentials like API keys and passwords are scattered across systems, increasing security risks.
Secrets VersioningSecrets versioning tracks changes to API keys, credentials, and other sensitive data, ensuring rollback, auditing, and secure updates.
Security Assertion Markup Language (SAML)A standard that authenticates users and authorizes access to applications and services, based on the Extensible Markup Language (XML).
Security Information and Event Management (SIEM)SIEM (Security Information and Event Management) centralizes log data, detects threats, and helps organizations respond to security incidents efficiently.
Service AccountsService accounts are non-human identities used by applications, services, or scripts to authenticate and access resources securely.
Single Sign-On (SSO)Services that allow users to access multiple different applications with only a single login.
Software Development Kit (SDK)A Software Development Kit (SDK) is a collection of tools, libraries, and docs that help developers build applications for a specific platform.
System for Cross-domain Identity Management (SCIM)A protocol for exchanging identity information between entities and is used to simplify the process of governing access to cloud-based applications.
T
Text User Interface (TUI)A Text User Interface (TUI) is a command-line-based interface that enhances usability with structured menus, colors, and keyboard navigation.
Z
Zero Knowledge EncryptionZero Knowledge Encryption ensures data is encrypted client-side, so even the service provider can’t access or decrypt it.
Zero TrustZero Trust is a security model that assumes no entity is trustworthy by default, requiring continuous verification for access.
Enter the new era of secrets management
Trusted by the world’s best DevOps and security teams. Doppler is the secrets manager developers love.
