MANAGE SECRETS.
Securely store and manage environment variables for your applications. Separate configuration from code for better security and flexibility.
ADDING VARIABLES
Add environment variables from the dashboard at Settings → Environment Variables. Variables are encrypted and securely stored.
DATABASE_URLAPI_KEYNavigate to your app's Settings > Environment Variables in the Control Center to add, edit, or delete variables.
SECURITY
Environment variables are encrypted at rest and in transit. They're only decrypted during build and runtime.
AES-256 Encryption
All secrets are encrypted using industry-standard AES-256.
Key Rotation
Encryption keys are automatically rotated for added security.
IMPORTANT: Never commit secrets to your repository. Use environment variables instead.
MULTIPLE ENVIRONMENTS
Configure different values for production, preview, and development environments. Each deployment gets the appropriate variables.
PRODUCTION
Live environment with production secrets.
PREVIEW
Branch deployments and pull request previews.
DEVELOPMENT
Local development and testing environments.
CLIENT-SIDE VARIABLES
Prefix variables with NEXT_PUBLIC_to expose them to the browser. Use this for non-sensitive configuration only.
# Server-only (secure)
DATABASE_URL=postgresql://...
API_SECRET=sk_live_xxx
# Client-accessible (public)
NEXT_PUBLIC_API_URL=https://api.example.com
NEXT_PUBLIC_ANALYTICS_ID=UA-12345