Secrets are environment variables for your bot, such as DISCORD_TOKEN.
- Values are encrypted at rest with AES-256-GCM and bound to the bot they belong to.
- After saving, we only show a masked preview. Values are never sent back to the browser.
- Known secret values and common credential formats are redacted from logs.
- Secrets are removed from error text before it is sent to the AI for an explanation.
- Exports of your account never include secret values.
Naming
Use UPPER_SNAKE_CASE. Names starting with BH_, NODE_, PYTHON, PATH or LD_ are reserved.
Rotating
Save a new value under the same name and restart the bot. If a token may have leaked, reset it in the Discord Developer Portal first.