Secrets#
Automatic rotation. A secret can replace its own value with a newly generated one, every few minutes, hours or days, or on chosen weekdays at a set time. The new value fits the secret's type: random characters, a UUID, random bytes as hex or base64, or a number in a range you set. Each rotation is a new version, appears in your audit log and webhooks, and reaches your machines on their next read. On a structured secret, you choose which fields rotate.
Secrets belong to one environment. The same name in dev and prod is now two separate secrets. Also set in creates linked copies that start with the same value and are always renamed together, while each keeps its own value from then on. Unlink takes a copy out of the link.
Search and filter your secrets. Every environment's secrets can be searched by name and filtered by kind and value type. Filtering by a type also finds structured secrets with a field of that type. The Projects page has a search bar too.
A clearer secrets list. Each secret's type sits beside its name: structured secrets show their field count in blue, canaries stand out in amber, and linked and rotating secrets carry their own marks.
Security#
Keep your master key in the TPM. On Linux and Windows machines with a TPM 2.0, Settings → Encryption & keys moves the master key that encrypts your secrets into the machine's security chip, in one step, and can move it back. Your Burrow unlocks it when it starts, so everything else works as it did.
Telemetry#
Daily usage reports, yours to switch off. A claimed Burrow sends RatelKey a daily report on how it runs and what it holds, counted, never listed. Secret values and the names of anything you created are never sent. Settings → Telemetry turns each kind of report off and shows the next one exactly as it will be sent.
Dashboard#
Mobile optimizations. On a narrow screen the navigation folds into a menu, Settings sections become a row of tabs you can swipe, and tables scroll sideways instead of squeezing their columns. On an iPhone, tapping a field no longer zooms the page.
Lists that fit your screen. Projects, machines, tokens, webhooks, members and the audit log each fit your screen and scroll on their own, with their headings kept in view. Row menus always open in full, even inside dialogs.
Tabs. Members is now Members & Roles, and the Audit log tab sits last.
Windows#
Interactive service setup. Double-click burrow-service.bat and it shows whether the Burrow's Windows service is installed and running, then lets you install and start it, start it, stop it or remove it from a menu, returning to the menu after each. It asks for administrator rights itself. Scripts can still pass install, start, stop or remove to skip the menu.
Learn more in the docs.