Secrets Store

Secrets Store gives you account-level secrets that multiple Workers can bind to, replacing the old pattern of duplicating the same API key across every Worker’s environment variables and inevitably forgetting one during rotation.

Having one place to update a credential is enough reason to adopt it. Scoped bindings control which Workers can read each secret, and the permissions fit sensibly into the dashboard’s existing RBAC.

It lacks the features of a mature secrets manager: automatic rotation, rollbackable versions, detailed audit trails, and integrations outside Workers. The name is accurate. This is a secrets store, not a secrets manager. Use it instead of duplicating environment variables, but do not expect Vault.