Skip to main content
All glossary terms

Credentials & security

Write-only secret

A write-only secret is a sensitive value that a management interface accepts but does not later display in plaintext. The design limits one exposure path, while service access, storage, backups, logs, and replacement workflows still require appropriate protection.

Also known as non-retrievable secret.

Why it matters in practice

Write-only handling helps prevent accidental redisclosure when an operator revisits a settings page. It should provide clear confirmation and a safe way to replace a value without pretending the system cannot use it. Users need to understand that hiding a secret after entry is not the same as cryptographic erasure.

Example

An administrator submits a new API key, sees that a value is stored, and can replace it later without reading the original plaintext.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.