Secret types

The value formats a secret or structured field can take, from a plain string to generated credentials, checked when you save.

Updated Sep 17, 2026

Every single-value secret, and every field of a structured secret, has a type — the shape its value takes. The type is set when the secret or field is created and does not change afterward. It does two things: your value is checked against the type when you save, and the types that can be generated offer a Generate button in the form.

Type

What it holds

String

Any text. The default, and never rejected.

Integer

A whole number, of any size.

Decimal

A number with a decimal point.

Boolean

true or false, chosen from a picker.

JSON

A JSON document, edited in a code box.

JSON5

JSON with comments and trailing commas.

YAML

A YAML document.

XML

An XML document.

Email

An email address.

URL

A web address.

UUID

A UUID. Can be generated.

Password

A password, pasted or made with the built-in generator.

Token

An opaque token. Can be generated.

Hex

A hexadecimal string. Can be generated.

Base64

A base64 string. Can be generated.

HMAC

An HMAC key. Can be generated.

Generated values#

UUID, Password, Token, Hex, Base64, and HMAC can be filled in for you with Generate. Password has a fuller generator: a length slider and toggles for upper case, lower case, digits, symbols, and leaving out look-alike characters.

The type describes the value's format only. Whatever type you choose, the value is stored and encrypted the same way.