Materialize/doc/user/content/sql/create-secret.md

---

title: "CREATE SECRET" description: "CREATE SECRET securely stores credentials in Materialize's secret management system." menu: main:

parent: 'commands'

---

A secret securely stores sensitive credentials (like passwords and SSL keys) in Materialize's secret management system. Optionally, a secret can also be used to store credentials that are generally not sensitive (like usernames and SSL certificates), so that all your credentials are managed uniformly.

Syntax

{{< diagram "create-secret.svg" >}}

Field	Use
name	The identifier for the secret.
value	The value for the secret. The value expression may not reference any relations, and must be implicitly castable to bytea.

Examples

CREATE SECRET kafka_ca_cert AS decode('c2VjcmV0Cg==', 'base64');

Privileges

The privileges required to execute this statement are:

{{< include-md file="shared-content/sql-command-privileges/create-secret.md" >}}

Related pages

• CREATE CONNECTION
• ALTER SECRET
• DROP SECRET
• SHOW SECRETS