Secrets Store

Secrets Store gives you account-level secrets that multiple Workers can bind to, replacing the old pattern of duplicating the same API key across every Worker’s environment variables and inevitably forgetting one during rotation.

That single improvement — one place to update a credential, scoped bindings controlling which Workers can read it — is worth adopting on its own, and the permission model slots into the dashboard’s existing RBAC sensibly.

What’s missing is everything a mature secrets manager grows: automatic rotation, versioning with rollback, audit trails with real depth, and integrations beyond the Workers platform. It’s a secrets store, accurately named, not yet a secrets manager. Use it over env-var sprawl without hesitation; keep Vault-class expectations parked for now.