Introducing Cloudflare Secrets Store (Beta): secure your secrets, simplify your workflow
Apr 9, 2025Mia Malden, Mitali Rawat, James Vaughan

Summary
Introduces Cloudflare Secrets Store (Beta) for centralized management, improved security, and restricted access to sensitive values across Cloudflare products, starting with Workers. Secrets are encrypted using a two-level key hierarchy (DEK/KEK) and propagated via Quicksilver. It introduces new RBAC roles (Secrets Store Admin, Reporter, Deployer) for granular control over secrets and allows secrets to be scoped to specific Cloudflare products. Integrates with Workers via bindings and Wrangler CLI.