# Make secrets stored in Postman more secure **URL:** \ **Category:** Help Hub\ **Tags:** variables, security, authentication\ **Created:** [March 27, 2021, 6:17pm UTC](https://community.postman.com/t/make-secrets-stored-in-postman-more-secure/21971 "2021-03-27T18:17:35Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![hex\_dec](https://avatars.discourse-cdn.com/v4/letter/h/e79b87/32.png) [@hex\_dec](https://community.postman.com/u/hex_dec)\ **Post date:** [March 27, 2021, 6:17pm UTC](https://community.postman.com/t/make-secrets-stored-in-postman-more-secure/21971/1 "2021-03-27T18:17:36Z")
Hi Everyone! Not so long ago I have started to really actively usign Postman and I was surprised to find out that there is no way to securely store secrets in Postman. All data stored as variables in environments in Postman is visible to anyone who happens to pass by your computer while you are working with variables. And it is just so easy to sync your secrets along with all other data and send them each and every colleague in your organisation who is using Postman by a simple misclick. While looking for a way to secure my secrets, I have come across this GitHub issue: > > > \### Is your feature request related to a problem? Please describe. > Variable val…ues are suggested to be used for passwords and api keys but when the editor is open anyone can look over your shoulder and view these values that are suppose to be secure. > > \### Describe the solution you'd like > In the postman variable editor have an option on the variable to mark it as Secure. > > \#### When a variable is marked as Secure. > 1. The 'Initial Value' box could be set to some static placeholder value like 'SECURE', since this is the value that gets synced to the cloud and can be shared with a team it should require an action to set this value. > 2. The 'Current Value' box should be like a password box and show \*\*\*\*\*\*\*\* for any over the shoulder lookers. There should also, 1. Be a button available to be clicked that will make the value visible until focus changes, or 2. Make the value visible and editable when you click into the value box. > 3. Values for secure variables should should not be able to be exported to plain text files. > 4. Secure variables should always be stored encrypted, on the local machine. > > > \### Related posts > Variables stored at rest - https://community.getpostman.com/t/variables-stored-at-rest/5645 > Feature Request: Encrypt local variables - https://github.com/postmanlabs/postman-app-support/issues/6638 > > > \### Similar requests that are closed > Feature Request: Hidden environment variables for passwords - https://github.com/postmanlabs/postman-app-support/issues/824 > Feature Request: Secure environment variables - https://github.com/postmanlabs/postman-app-support/issues/4777 I would like to raise attention to this issue here, among Postman users, and I hope that for some of you reading this post this feature is as valuable as it is for me and I hope you could put a ‘Thumbs Up’ on this issue to reflect that. Wish you all the best! Stay safe! ---
**Author:** ![sahuvikramp](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/sahuvikramp/32/10828_2.png) [@sahuvikramp](https://community.postman.com/u/sahuvikramp)\ **Post date:** [February 12, 2022, 1:47pm UTC](https://community.postman.com/t/make-secrets-stored-in-postman-more-secure/21971/2 "2022-02-12T13:47:42Z")
Hello @hex_dec, You requested, and we did it 😃. We appreciated your suggestion and patience. Now, everyone can store the variables more securely using **secret variable type**. Here are few resources, which can help you understand secret variables in detailed manner : 1. [**Blog** : Secret variable.](https://blog.postman.com/introducing-secret-variable-type-in-postman/) 2. [**Learning center**](https://learning.postman.com/docs/sending-requests/variables/#variable-types) 3. [**GitHub issue** details.](https://github.com/postmanlabs/postman-app-support/issues/6639#issuecomment-1002070063) ![Screenshot 2022-02-12 at 7.07.31 PM](https://us1.discourse-cdn.com/getpostman/original/2X/f/fc177bbecea951d9cc5a6fa88249e9fe569d6e6f.png) Cheers 🛡 ---
**Author:** ![danny-dainton](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/danny-dainton/32/29401_2.png) [@danny-dainton](https://community.postman.com/u/danny-dainton)\ **Post date:** [June 11, 2024, 9:44am UTC](https://community.postman.com/t/make-secrets-stored-in-postman-more-secure/21971/3 "2024-06-11T09:44:06Z")
With V11 of Postman, we have introduced the Postman Vault ([Store secrets in your Postman Vault | Postman Learning Center](https://learning.postman.com/docs/sending-requests/postman-vault/postman-vault-secrets/)), which allows you to store your sensitive data in an encrypted local vault that is not synced with the Postman Cloud. Also, we have added multiple security features to help prevent accidental exposure of your API credentials. ---
**Author:** ![danny-dainton](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/danny-dainton/32/29401_2.png) [@danny-dainton](https://community.postman.com/u/danny-dainton)\ **Post date:** [June 11, 2024, 9:44am UTC](https://community.postman.com/t/make-secrets-stored-in-postman-more-secure/21971/4 "2024-06-11T09:44:11Z")