Skip to main content
Some blocks need a password or a key. For example, a web request to another website that needs an API key.
Never type keys straight into a block. Anyone who can see the block could copy them. Put them in Secrets instead.

​
How to use a secret

1

Open Secrets

Open Secrets in the sidebar. In the builder, you can also use the Secrets panel in the side bar.
2

Add a secret

Give it a name, like weather_key, and paste the key.
3

Use it in a block

In your block, press the { } Variables button and pick your secret from the list. Or type it yourself as {secret.NAME}.

Example

You saved a secret called weather_key. In a web request block, the address is:
When the bot runs, it puts the real key in. Nobody looking at the block can see it.

​
Why secrets are safe

Hidden from collaborators

Collaborators cannot see the secret value.

Never in logs

Secrets are never shown in Error Logs or Replays.

No backup value

A secret never uses a backup value. If it is missing, nothing wrong is sent.
See Web requests to learn how to call other websites.