← Back to glossary

Confidential key material (or shared secret) used for encryption, signing, or authentication.

Definition

A secret key is confidential material used for symmetric encryption, message authentication, token signing, or service authentication. It must be stored securely, access-controlled, rotated, and monitored.

In plain English Confidential key material (or shared secret) used for encryption, signing, or authentication.

Why this matters

Why it matters: Secret exposure often equals system compromise; good secret handling reduces the risk of breaches and impersonation.

Example

Example: Store secrets in a vault, enforce least privilege, rotate routinely, and alert on unusual secret usage.